CVE-2006-4312: Medium severity Cisco Pix Firewall 501 vulnerability
Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4312?
CVE-2006-4312 is considered a critical vulnerability affecting Cisco PIX and ASA devices.
How do I fix CVE-2006-4312?
To mitigate CVE-2006-4312, upgrade your Cisco devices to the latest available firmware version.
Which devices are affected by CVE-2006-4312?
CVE-2006-4312 affects various models of Cisco PIX 500 Series and ASA 5500 Series devices running specific firmware versions.
What impact does CVE-2006-4312 have on network security?
CVE-2006-4312 allows unauthorized password changes, which can compromise device management and overall network security.
Is there a workaround for CVE-2006-4312?
There are no published workarounds for CVE-2006-4312; updating to a secure firmware version is the advised approach.