VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 20, 2015· Updated Jun 17, 2026

CVE-2015-4321

CVE-2015-4321

Description

The Unicast Reverse Path Forwarding (uRPF) implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50), 9.3(2.100), 9.3(3), and 9.4(1) mishandles cases where an IP address belongs to an internal interface but is also in the ASA routing table, which allows remote attackers to bypass uRPF validation via spoofed packets, aka Bug ID CSCuv60724.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Cisco Systems, Inc./Cisco Adaptive Security Appliance4 versions
    cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\(1.50\):*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\(1.50\):*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\(2.100\):*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\(3\):*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4\(1\):*:*:*:*:*:*:*
  • Cisco Systems, Inc./Adaptive Security Appliance (ASA) Softwarellm-fuzzy
    Range: = 9.3(1.50), 9.3(2.100), 9.3(3), 9.4(1)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.