CVE-2015-4239: Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cau...

Security readout for executives and security teams

This issue can let a nearby attacker crash and reload a Cisco ASA by sending crafted OSPFv2 packets on the local network. The impact is availability: firewall, VPN, or security services may briefly fail or restart. The source bundle provides no CVSS score and no evidence of active exploitation. Exposure is most likely where Cisco ASA runs the cited software builds and has OSPFv2 reachable from local network segments. Internet-wide exposure is not indicated by the sources because the attack is described as local-network packet delivery. Treat as a reliability risk for network security infrastructure. Prioritize affected production ASA appliances, especially where a reload would interrupt firewall, VPN, or routing availability. Urgency is lower than confirmed exploited remote code execution, but outages on perimeter devices can still be business-impacting. Mitigation focus: Check Cisco advisory 39612 for fixed or recommended ASA software guidance.; Inventory ASA devices for software versions 9.3(2.243) and 100.13(0.21).; Reduce untrusted access to OSPF-speaking ASA interfaces and adjacent local segments..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.