CVE-2015-0678: cisco asa_cx_context-aware_security_software Improper Input Validation
Vulnerability summary
CVE-2015-0678 is a high (CVSS 7.8) Improper Input Validation vulnerability in cisco asa_cx_context-aware_security_software. EPSS estimates a 2.30% chance of exploitation in the next 30 days, higher than 83% of scored vulnerabilities.
Timeline
- 11-04-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of service (device reload) by rapidly sending crafted packets to the management interface, aka Bug IDs CSCus11007 and CSCun56954.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.30%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.30% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco2 products
- asa_cx_context-aware_security_software9.0.1 | 9.0.1-40 | 9.0.2 | 9.0.2-68 | 9.0_base | 9.1.2-29 | 9.1.2-42 | 9.1.3-8 | 9.1.3-10 | 9.1.3-13 | 9.2.1-1 | 9.2.1-2 | 9.2.1-3 | 9.2.1-4 | 9.3\(1.1.112\) | 9.3.1-1 | 9.3.2-1 | 9.3_base
- asa_with_firepower_services5.3.1 | 5.3.1.1 | 5.4.0
1 vendor · 2 products
References
2 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-cxfpVendor AdvisoryX Refsource CISCO