CVE-2016-1369

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-05-05 · updated 2026-06-17
Weakness: CWE-399

Description

The Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module for Cisco ASA with FirePOWER Services 5.3.1 through 6.0.0 misconfigures kernel logging, which allows remote attackers to cause a denial of service (resource consumption, and inspection outage or module outage) via a flood of crafted IP traffic, aka Bug ID CSCux19922.

Affected products

Cisco Asa With Firepower Services: 5.3.1, 5.3.1.1, 5.4.0, 5.4.0.1, 5.4.0.2, 5.4.0.3 (+11)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-fpkern
http://www.securitytracker.com/id/1035743
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-fpkern
http://www.securitytracker.com/id/1035743

Get alerted when CVE-2016-1369 or the next vulnerability affects your stack