Detections
Analytics
Cisco ASA Uncontrolled Resource Consumption (CVE-2019-15256)
high Tenable OT Security Plugin ID 506068
Synopsis
The remote OT asset is affected by a vulnerability.Description
A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper management of system memory. An attacker could exploit this vulnerability by sending malicious IKEv1 traffic to an affected device. The attacker does not need valid credentials to authenticate the VPN session, nor does the attacker's source address need to match a peer statement in the crypto map applied to the ingress interface of the affected device. An exploit could allow the attacker to exhaust system memory resources, leading to a reload of an affected device.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
Plugin Details
Severity: High
ID: 506068
File Name: tenable_ot_cisco_CVE-2019-15256.nasl
Version: 1.1
Type: Remote
Family: Tenable.ot
Published: 10/5/2026
Updated: 10/5/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Low
Score: 3.3
Percentile: 50.87
CVSS v2
Risk Factor: High
Base Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2019-15256
CVSS v3
Risk Factor: High
Base Score: 8.6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Vulnerability Information
CPE: cpe:/o:cisco:adaptive_security_appliance_software:9
Required KB Items: Tenable.ot/Cisco
Patch Publication Date: 10/2/2019
Vulnerability Publication Date: 10/2/2019
Reference Information
CVE: CVE-2019-15256