« Volver al listado

CVE-2015-4550

Estado: ModificadaMedia (4.3)—

The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, aka Bug ID CSCuu66218.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Adaptive Security Appliance Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-4550",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-06-17T10:59:07.727",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39366",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/75269",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1032595",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39366",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/75269",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032595",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, aka Bug ID CSCuu66218."
    },
    {
      "lang": "es",
      "value": "El firmware del módulo criptográfico Cavium en los dispositivos Cisco Adaptive Security Appliance (ASA) con software 9.3(3) y 9.4(1.1) no verifica los octetos AES-GCM Integrity Check Value (ICV), lo que facilita a atacantes man-in-the-middle falsificar trafico IPSec e IKEv2 mediante la modificación de datos de paquetes, también conocido como Bug ID CSCuu66218."
    }
  ],
  "lastModified": "2026-06-17T00:27:32.237",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\\(3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63FECF84-4FFB-443E-8529-A1FA4D1D821C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4\\(1.1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E04C0569-6E1B-4F41-92B9-D024E401E679"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}