CVE-2014-2127

Cisco ASA SSL VPN Privilege Escalation Vulnerability

Title source: github.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2014-2127 has a selected CVSS score of 8.5; EIP currently links 1 catalogued exploit.

Description

Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before 9.1(4.3) does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows remote authenticated users to gain privileges by establishing a Clientless SSL VPN session and entering crafted URLs, aka Bug ID CSCul70099.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

MetasploitCisco ASA SSL VPN Privilege Escalation VulnerabilityMetasploit auxiliary PoCby jclaudius <jclaudius@trustwave.com> +1 moreNot analyzed1 file

Ruby

Metasploit
PoC details

References

2