Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15)

Затронутые версии

Диапазоны версий NVD (для продуктов из каталога). Добавьте продукт в стек с версией, и сопоставление будет по ним.

• cisco firewall services module software3.1
• cisco firewall services module software3.1(10)
• cisco firewall services module software3.1(11)
• cisco firewall services module software3.1(12)
• cisco firewall services module software3.1(13)
• cisco firewall services module software3.1(14)
• cisco firewall services module software3.1(15)
• cisco firewall services module software3.1(16)
• cisco firewall services module software3.1(17)
• cisco firewall services module software3.1(18)
• cisco firewall services module software3.1(19)
• cisco firewall services module software3.1(2)
• cisco firewall services module software3.1(20)
• cisco firewall services module software3.1(21)
• cisco firewall services module software3.1(3)
• cisco firewall services module software3.1(4)
• cisco firewall services module software3.1(5)
• cisco firewall services module software3.1(6)
• cisco firewall services module software3.1(7)
• cisco firewall services module software3.1(8)

Другие записи с наивысшей оценкой для того же основного продукта.

• CVE-2012-0356Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, wit
  32Наблюдать
• CVE-2011-3296Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is us
  32Наблюдать
• CVE-2013-1155The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 b
  31Наблюдать
• CVE-2011-3297Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain au
  31Наблюдать
• CVE-2010-2820Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2),
  31Наблюдать
• CVE-2010-2819Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2),
  31Наблюдать

Ежедневная оценка FIRST EPSS; записываются только изменения от 0,01 (ступенчатый график).

Контекст атаки

Шаблоны атак MITRE CAPEC и техники ATT&CK для этого класса уязвимости (CWE). Отправная точка для правил обнаружения и threat hunting.