CVE-2015-4458: The TLS implementation in the Cavium cryptographic-module firmware, as distributed with Cisco Adaptive Secu...

Security readout for executives and security teams

This flaw weakens the trust users place in TLS on affected devices. The cited description says the Cavium cryptographic-module firmware used with Cisco ASA Software 9.1(5.21) did not verify TLS message authentication codes, allowing a network-positioned attacker to alter TLS traffic and spoof content. Exposure is most likely in Cisco ASA deployments running ASA Software 9.1(5.21) or other products using the affected Cavium cryptographic-module firmware. The provided sources do not identify full affected-version ranges, CPEs, or all affected products. Treat this as a high-priority integrity risk for legacy Cisco ASA environments, especially where devices protect sensitive traffic. Urgency depends on whether affected versions remain deployed and whether attackers can intercept network paths. Mitigation focus: Review Cisco advisory 39919 and Bug ID CSCuu52976 for fixed releases or workarounds.; Inventory Cisco ASA devices, prioritizing any running ASA Software 9.1(5.21).; Identify products using Cavium cryptographic-module firmware in TLS handling paths..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.