CVE-2015-6379: The XML parser in the management interface in Cisco Adaptive Security Appliance (ASA) Software 8.4 allows r...

Security readout for executives and security teams

CVE-2015-6379 is a denial-of-service issue in Cisco ASA Software 8.4. An authenticated user who can reach the management interface could send a crafted XML document that crashes the device. For executives, the concern is firewall availability, especially where old ASA 8.4 devices still protect business-critical networks. Exposure is most likely limited to organizations still running Cisco ASA Software 8.4 with reachable management interfaces and valid authenticated users. The provided affected-product metadata is incomplete, so inventory confirmation is required. Treat this as a targeted availability risk for legacy firewall infrastructure. It is not shown as actively exploited, but an exposed management plane on ASA 8.4 could let an authenticated user disrupt network security operations. Mitigation focus: Check Cisco advisory cisco-sa-20151123-asa for official affected and fixed release guidance.; Identify and prioritize any remaining Cisco ASA Software 8.4 deployments.; Restrict ASA management interface access to trusted administrative networks and users..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.