CVE-2014-3382

EUVD-2014-3395
The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.5), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted SQL REDIRECT packets, aka Bug ID CSCum46027.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Affected Products (NVD)
VendorProductVersion
ciscoasa
7.2.5
ciscoasa
7.2.5.10
ciscoasa
8.2.5
ciscoasa
8.2.5.13
ciscoasa
8.2.5.22
ciscoasa
8.2.5.26
ciscoasa
8.2.5.33
ciscoasa
8.2.5.41
ciscoasa
8.2.5.46
ciscoasa
8.2.5.48
ciscoasa
8.2.5.49
ciscoasa
8.3
ciscoasa
8.3.2.25
ciscoasa
8.4
ciscoasa
8.4.1
ciscoasa
8.4.2
ciscoasa
8.4.3
ciscoasa
8.4.4
ciscoasa
8.4.5
ciscoasa
8.4.6
ciscoasa
8.4.7
ciscoasa
8.5
ciscoasa
8.5.1.6
ciscoasa
8.6
ciscoasa
8.7
ciscoasa
9.0
ciscoasa
9.1
𝑥
= Vulnerable software versions