Description
The DCERPC Inspection implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 through 9.5.1 allows remote authenticated users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic, aka Bug ID CSCuu67782.
References
- 20160111 Cisco Adaptive Security Appliance Non-DCERPC Traffic Bypass Vulnerability vendor-advisory
- 1034644 vdb-entry