CVE-2015-4550
Cisco ASA 9.3(3)/9.4(1.1) - Man-in-the-Middle Traffic Spoofing via AES-GCM ICV Bypass
Title source: llmDescription
The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, aka Bug ID CSCuu66218.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/75269
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032595
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39366
Scores
EPSS
0.0129
EPSS Percentile
67.2%
Details
CWE
CWE-310
Status
published
Products (2)
cisco/adaptive_security_appliance_software
9.3\(3\)
cisco/adaptive_security_appliance_software
9.4\(1.1\)
Published
Jun 17, 2015
Tracked Since
Feb 18, 2026