CVE-2014-0655: Cisco Adaptive Security Appliance

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization (CoA) messages, aka Bug ID CSCuj45332.

Affected products

• Cisco Adaptive Security Appliance: any version

Published 2014-01-08. Last modified 2026-06-17.