Test ID:	1.3.6.1.4.1.25623.1.0.806682
Category:	CISCO
Title:	Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability
Summary:	This host is running Cisco ASA Software and; is prone to buffer overflow vulnerability.
Description:	Summary: This host is running Cisco ASA Software and is prone to buffer overflow vulnerability. Vulnerability Insight: The flaw is due to buffer overflow error in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code. Vulnerability Impact: Successful exploitation allows the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Affected Software/OS: Cisco ASA Software versions 7.2.x, 8.0.x, 8.1.x, 8.3.x, 8.6.x before 9.1(6.11), 8.2.x before 8.2(5.59), 8.4.x before 8.4(7.30), 8.7.x before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(6.11), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), 9.5 before 9.5(2.2) on Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Cisco ASA 1000V Cloud Firewall, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco Firepower 9300 ASA Security Module, Cisco ISA 3000 Industrial Security Appliance. Solution: Upgrade to 8.4(7.30) or 8.2(5.59) or 8.7(1.18) or 9.0(4.38) or 9.1(6.11) or 9.2(4.5) or 9.3(3.7) or 9.4(2.4) or 9.5(2.2). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1287 CERT/CC vulnerability note: VU#327976 https://www.kb.cert.org/vuls/id/327976 Cisco Security Advisory: 20160210 Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ike https://www.exploit-db.com/exploits/39823/ http://packetstormsecurity.com/files/137100/Cisco-ASA-Software-IKEv1-IKEv2-Buffer-Overflow.html https://blog.exodusintel.com/2016/02/10/firewall-hacking/ http://www.securitytracker.com/id/1034997
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.