Unrated severityNVD Advisory· Published Jun 17, 2015· Updated Jun 17, 2026

CVE-2015-4550

Description

The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, aka Bug ID CSCuu66218.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Cisco Adaptive Security Appliance2 versions
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\(3\):*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4\(1.1\):*:*:*:*:*:*:*
Cisco Systems, Inc./Adaptive Security Appliance (ASA) Softwarellm-fuzzy
Range: 9.3(3), 9.4(1.1)

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/viewAlert.xnvdVendor Advisory
www.securityfocus.com/bid/75269nvd
www.securitytracker.com/id/1032595nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000