Denial of Service Vulnerability in Cisco Adaptive Security Appliances and PIX Security Appliances

CVE-2011-0393

Summary

A vulnerability exists in Cisco Adaptive Security Appliances (ASA) 5500 series and PIX Security Appliances 500 series devices when configured in transparent firewall mode without IPv6 support. This misconfiguration allows remote attackers to exploit the devices using IPv6 traffic, leading to denial of service from packet buffer exhaustion and, potentially, device outages. Customers should ensure that devices are properly configured to mitigate this risk.

References