CVE-2015-0760

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-04 · updated 2026-06-17
Weakness: CWE-20

Description

The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259.

Affected products

Cisco ASA Software: from 7.0 before 8.2.2.13 — fixed in 8.2.2.13

How to fix

Upgrade to a fixed version: Cisco ASA Software 8.2.2.13. Check the vendor advisory for mitigations.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=39157
http://www.securitytracker.com/id/1032473
http://tools.cisco.com/security/center/viewAlert.x?alertId=39157
http://www.securitytracker.com/id/1032473

Get alerted when CVE-2015-0760 or the next vulnerability affects your stack