IPSec Client Authentication Vulnerability in Cisco PIX and ASA Devices

CVE-2008-2733

Summary

Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices are susceptible to vulnerabilities when configured as VPN client endpoints. These vulnerabilities arise from improper handling of IPSec client authentication, allowing remote attackers to exploit this weakness. By sending specifically crafted authentication requests, attackers can trigger a device reload, leading to a denial of service scenario. This can impact network availability and compromise endpoint security.

References