CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.3. It affects Cisco. It may be remotely exploitable.
CVE
CVE-2015-0675
Severity
HIGH
CVSS
8.3
EPSS
0.96%
Cisco
Original NVD Description
The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before 9.3(3) does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrative control, by sending crafted UDP packets over the local network to the failover interface, aka Bug ID CSCur21069.