QwikSec

Security Database

CVE

CWE

Training

CVE-2013-1194

Published: Apr 18, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on whether invalid VPN groups are specified, which allows remote attackers to enumerate groups via a series of messages, aka Bug ID CSCue73708.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20130417 Cisco ASA Software VPN Group Enumeration Vulnerability

vendor-advisory

x_refsource_CISCO

20130418 TWSL2013-004: Group Name Enumeration Vulnerability in Cisco IKE Implementation

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.