CVE-2016-1287

47Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 77%

from disclosure to weapon4 days

Published on NVDFeb 11

1st PoC+4d

exploitation probability

77%top 1% of all CVEs

observed exploitation

nono source reports it

5 public exploit(s)

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019.

Affected products

n/a · n/a

public PoCs found — 5✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/39823 githubgithub.com/NetSPI/asa_tools★ 33 githubgithub.com/jgajek/killasa★ 16 cve_referencepacketstormsecurity.com/files/137100/Cisco-ASA-Software-IKEv1-IKEv2-Buffer-Overflow.htmlunverified cve_referencewww.exploit-db.com/exploits/39823/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/137100/Cisco-ASA-Software-IKEv1-IKEv2-Buffer-Overflow.html https://blog.exodusintel.com/2016/02/10/firewall-hacking/https://www.exploit-db.com/exploits/39823/https://www.kb.cert.org/vuls/id/327976 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ike http://www.securitytracker.com/id/1034997