Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco PIX和ASA设备绕过ACL漏洞
Vulnerability Description
Cisco PIX是一款防火墙设备，可为用户和应用提供策略强化、多载体攻击防护和安全连接服务；自适应安全设备(ASA)是可提供安全和VPN服务的模块化平台。 对于没有匹配ACL中任何permit或deny ACE且到达了ACL末尾的报文，访问列表会执行其暗示的拒绝行为。这种暗示的拒绝是设计决定的，不需要任何配置，可以理解为拒绝所有到达ACL末尾通讯的未明确载明ACE。Cisco ASA和Cisco PIX中的安全漏洞可能允许通讯绕过这种暗示的deny ACE。这种行为仅影响设备上所应用ACL的暗示的拒绝语
CVSS Information
N/A
Vulnerability Type
N/A