CVE-2011-0395: High severity cisco adaptive security appliance software vulnerability
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP update, aka Bug ID CSCtg66583.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0395?
The severity of CVE-2011-0395 is classified as high due to the potential for remote denial of service.
How do I fix CVE-2011-0395?
To fix CVE-2011-0395, upgrade the Cisco Adaptive Security Appliance software to the latest version recommended by Cisco.
Which devices are affected by CVE-2011-0395?
CVE-2011-0395 affects Cisco Adaptive Security Appliance (ASA) 5500 series devices running specific versions of software prior to the patches.
What type of attack does CVE-2011-0395 enable?
CVE-2011-0395 enables remote attackers to execute a denial of service attack on affected Cisco ASA devices.
Are there any workarounds for CVE-2011-0395?
While upgrading is the best fix, temporarily disabling the RIP protocol and Cisco Phone Proxy may help mitigate the risk associated with CVE-2011-0395.