SynopsisThe remote security device is missing a vendor-supplied security patch.
DescriptionThe remote host (Cisco ASA 5500 series or 1000V Cloud Firewall) is missing a security patch. It, therefore, could be affected by the following issues :
- An unspecified vulnerability in the IKE version 1 implementation. (CVE-2013-1149)
- An unspecified vulnerability in the URL processing code of the authentication proxy feature. (CVE-2013-1150)
- An unspecified vulnerability in the implementation to validate digital certificates. (CVE-2013-1151)
- An unspecified vulnerability in the DNS inspection engine. (CVE-2013-1152)
A remote, unauthenticated attacker could exploit any of these vulnerabilities to cause a device reload.
SolutionApply the relevant patch referenced in Cisco Security Advisory cisco-sa-20130410-asa.