« Volver al listado

CVE-2015-0742

Estado: ModificadaMedia (5)—

The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9), and 100.14(1.1) does not properly implement multicast-forwarding registration, which allows remote attackers to cause a denial of service (forwarding outage) via a crafted multicast packet, aka Bug ID CSCus74398.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Adaptive Security Appliance Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0742",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-05-21T10:59:02.067",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38937",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/74750",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1032381",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38937",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/74750",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032381",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9), and 100.14(1.1) does not properly implement multicast-forwarding registration, which allows remote attackers to cause a denial of service (forwarding outage) via a crafted multicast packet, aka Bug ID CSCus74398."
    },
    {
      "lang": "es",
      "value": "La aplicación Protocol Independent Multicast (PIM) en el software Cisco Adaptive Security Appliance (ASA) 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9), y 100.14(1.1) no implementa correctamente el registro del reenvío de multicast, lo que permite a atacantes remotos causar una denegación de servicio (interrupción de reenvío) a través de un paquete multicast manipulado, también conocido como Bug ID CSCus74398."
    }
  ],
  "lastModified": "2026-06-17T00:20:49.873",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_software:9.2\\(3.4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A9ABCC1-3161-4C38-A8B1-3F26C3FDF399"
            },
            {
              "criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_software:9.4\\(0.115\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90D35A40-AFCC-4C19-B98C-0B10EAC2C217"
            },
            {
              "criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_software:100.13\\(0.21\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB43C79E-C103-49D9-B476-E20DC35585DC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_software:100.13\\(20.3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F51433B-2671-4F69-B81F-A5D0495D7E6C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_software:100.13\\(21.9\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93C158B3-C4FC-41A3-A60E-8E5045C10A67"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.0\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3A13A9C-5387-4670-8E20-FE878946D091"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(0.104\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F7C7DA3-C24B-41BB-BDBE-7DC58EEAC4F8"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.2\\(3.1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFC39DA3-8171-4344-A946-7965873C56F3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(1.105\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E26A1B0-D61C-4A25-8E10-02A2E3E7A02B"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(2.100\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F4A28B7-87A2-464A-92A8-644E3F7D13D7"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:100.14\\(1.1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31C5DEB8-688A-435E-8D80-14468F8FFCBD"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}