Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.6), and 9.3 before 9.3(1.1) does not properly implement a tunnel filter, which allows remote authenticated users to obtain failover-unit access via crafted packets, aka Bug ID CSCuq28582.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco ASA Software 远程命令注入漏洞
Vulnerability Description
Cisco ASA是美国思科(Cisco)公司的一套防火墙设备。该设备还包括IPS(入侵防御系统)、SSL VPN、IPSec VPN、反垃圾邮件等功能。 Cisco ASA Software中的VPN实现中存在安全漏洞,该漏洞源于程序没有正确实现隧道过滤器。远程攻击者可借助特制的数据包利用该漏洞获取failover-unit访问权限。以下版本受到影响:Cisco ASA Software 7.2(5.15)之前7.2版本,8.2(5.51)之前8.2版本,8.3(2.42)之前8.3版本,8.4(7.2
CVSS Information
N/A
Vulnerability Type
N/A