Unscored CVE-2013-1194 EUVD-2013-1234GHSA-2p73-3mwf-5gr7

The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode message…

Published Apr 18, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on whether invalid VPN groups are specified, which allows remote attackers to enumerate groups via a series of messages, aka Bug ID CSCue73708.

References

20130417 Cisco ASA Software VPN Group Enumeration Vulnerability vendor-advisory
20130418 TWSL2013-004: Group Name Enumeration Vulnerability in Cisco IKE Implementation mailing-list