CVE-2015-0675 describes a critical vulnerability in Cisco Adaptive Security Appliance (ASA) Software versions 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before 9.3(3). This flaw in the failover IPsec implementation allows remote attackers on the local network to gain administrative control by sending crafted UDP packets to the failover interface, due to improper validation of failover communication messages. With a CVSS score of 8.3 (AV:A/AC:L/Au:N/C:C/I:C/A:C), it represents a high-severity risk where an unauthenticated attacker can achieve complete compromise of confidentiality, integrity, and availability with low attack complexity. Although no public exploit code (Metasploit, Nuclei, ExploitDB) is listed and it's not in the KEV catalog, the vulnerability garnered some community discussion and media coverage at the time of its disclosure.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
9.1.1CPE matchmatch criteria | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1:*:*:*:*:*:*:* | ||
9.1.1.4CPE matchmatch criteria | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.1.4:*:*:*:*:*:*:* | ||
9.1.2CPE matchmatch criteria | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2:*:*:*:*:*:*:* | ||
9.1.2.8CPE matchmatch criteria | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.2.8:*:*:*:*:*:*:* | ||
9.1.3CPE matchmatch criteria | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1.3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:A/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.