News
Vigil@nce - Cisco ASA: enumeration of VPN groups
May 2013 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An unauthenticated attacker can send ISAKMP AM1 messages to Cisco
ASA, in order to detect if a VPN Group name is valid.
– Impacted products: ASA
– Severity: 2/4
– Creation date: 18/04/2013
DESCRIPTION OF THE VULNERABILITY
The Cisco ASA product can be configured as a VPN endpoint.
Clients can send an ISAKMP Aggressive Mode 1 message, which
indicates the name of the VPN group. However, replies from Cisco
ASA depend on whether the group exists or not.
An unauthenticated attacker can therefore send ISAKMP AM1 messages
to Cisco ASA, in order to detect if a VPN Group name is valid.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/Cisco-ASA-enumeration-of-VPN-groups-12691
