CVE-2014-0655: Input Validation
The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization (CoA) messages, aka Bug ID CSCuj45332.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0655?
CVE-2014-0655 is considered a high severity vulnerability due to its potential impact on the identity firewall functionality.
How do I fix CVE-2014-0655?
To fix CVE-2014-0655, update your Cisco Adaptive Security Appliance to the latest available version that addresses this vulnerability.
What functions are impacted by CVE-2014-0655?
CVE-2014-0655 impacts the Identity Firewall functionality of the Cisco Adaptive Security Appliance, which may allow unauthorized access to user-cache contents.
Who can exploit CVE-2014-0655?
Remote attackers with the capability to send crafted RADIUS Change of Authorization (CoA) messages can exploit CVE-2014-0655.
What are the potential consequences of CVE-2014-0655?
Exploitation of CVE-2014-0655 could lead to unauthorized modification of user-cache contents, affecting security and access controls.