CVE-2015-6423

Published: Jan 15, 2016Modified: May 6, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

The DCERPC Inspection implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 through 9.5.1 allows remote authenticated users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic, aka Bug ID CSCuu67782.

Affected (7)

Products: Cisco: Adaptive Security Appliance Software

Cisco

1 product

Adaptive Security Appliance Software

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Cisco Adaptive Security Appliance Software	Version 9.4.1.1
Cisco Adaptive Security Appliance Software	Version 9.4.1.2
Cisco Adaptive Security Appliance Software	Version 9.4.1.3
Cisco Adaptive Security Appliance Software	Version 9.4.1.5
Cisco Adaptive Security Appliance Software	Version 9.4.1
Cisco Adaptive Security Appliance Software	Version 9.4.2
Cisco Adaptive Security Appliance Software	Version 9.5.1

Related CWEs

CWE-264

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160111-asa

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1034644

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160111-asa

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1034644

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.