Detections
Analytics
OSPF LSA Manipulation Vulnerability in Cisco ASA (cisco-sa-20130801-lsaospf)
medium Nessus Plugin ID 69376
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
The remote Cisco ASA device is affected by a vulnerability involving the Open Shortest Path First (OSPF) Routing Protocol Link State Advertisement (LSA) database. This vulnerability could be exploited by injecting specially crafted OSPF packets. Successful exploitation could allow an unauthenticated attacker to manipulate or disrupt the flow of network traffic through the device.Solution
Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20130801-lsaospf.See Also
Plugin Details
Severity: Medium
ID: 69376
File Name: cisco-sa-20130801-lsaospf-asa.nasl
Version: 1.12
Type: local
Family: CISCO
Published: 8/16/2013
Updated: 3/31/2023
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: Medium
Base Score: 5.8
Temporal Score: 4.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:P
Vulnerability Information
CPE: cpe:/h:cisco:asa_5500
Required KB Items: Host/Cisco/ASA
Exploit Ease: No known exploits are available
Patch Publication Date: 8/1/2013
Vulnerability Publication Date: 8/1/2013
Reference Information
CVE: CVE-2013-0149
BID: 61566