CVE-2006-4312

Cisco PIX/ASA/FWSM <7.0(5) & 7.1(2.4) - Privilege Escalation

Title source: llm

Description

Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.

References (9)

Core 9

Core References

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/3367

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1016740

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/warp/public/707/cisco-sa-20060823-firewall.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/19681

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/28143

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1016738

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1016739

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/28540

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21616

Scores

EPSS 0.0032

EPSS Percentile 24.6%

Details

Status published

Products (9)

cisco/adaptive_security_appliance

cisco/pix_firewall_501

cisco/pix_firewall_506

cisco/pix_firewall_515

cisco/pix_firewall_515e

cisco/pix_firewall_520

cisco/pix_firewall_525

cisco/pix_firewall_535

cisco/pix_firewall_software 6.3

Published Aug 23, 2006

Tracked Since Feb 18, 2026