Unscored severity · published Aug 17, 2006
CVE-2006-4194
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Pix Firewall 501 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 506 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 515 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 515e · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 520 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 525 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 535 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall Software · Cisco
6.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4194
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4194
searchsecurity.techtarget.com
http://searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html
www.cisco.com
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html
www.idoel.smilejogja.com
http://www.idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away/
www.networkworld.com
http://www.networkworld.com/news/2006/080406-black-hat-unpatched-flaw-revealed.html?t5
www.osvdb.org
http://www.osvdb.org/29781
www.securityfocus.com
http://www.securityfocus.com/bid/19536
More from Pix Firewall 501
–
CVE-2006-4312
Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module…
–
CVE-2006-3906
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service…
–
CVE-2005-4499
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal…