CVE-2014-0655: The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remot...

Security readout for executives and security teams

Cisco ASA Identity Firewall could let a remote attacker replay specially crafted RADIUS Change of Authorization messages to alter user-cache contents. That cache may influence identity-based access decisions, so the concern is incorrect user-to-policy mapping. Severity, affected versions, and fixes are not included in the supplied bundle. Organizations using Cisco ASA Software with Identity Firewall and RADIUS CoA workflows may be exposed. The supplied affected-products data is incomplete and lists no versions, so inventory confirmation must rely on Cisco advisory details and local ASA configuration. Handle as a targeted network-security exposure with incomplete severity data. Prioritize verification for ASA systems enforcing identity-based policy, especially where RADIUS CoA is used. No active exploitation evidence is provided, so urgency depends on confirmed deployment exposure. Mitigation focus: Review Cisco’s CVE-2014-0655 security notice for affected releases and fixed software guidance.; Identify ASA devices using Identity Firewall and RADIUS CoA.; Restrict RADIUS CoA traffic to trusted authentication infrastructure where operationally possible..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.