Risk: High
A vulnerability has been found in the Cisco Security Agent (CSA) is a network security software agent that provides threat protection for server and desktop computing systems.
A malicious attacker may be able to send a crafted IP packet to a Windows workstation or server running CSA 4.5 which may cause the device to halt with a blue screen and/or reload. Repeated exploitation will create a sustained DoS (denial of service). When exploited, the affected machine will require a reboot to become operational again.
Affected Products:
Cisco CSA version 4.5 when running on any Microsoft Windows platforms except Windows XP.
Products Confirmed Not Vulnerable:
- Cisco CSA 4.0 and earlier
- Cisco CSA while running on Solaris
- Cisco CSA while running on Linux
- Cisco CSA while running on Windows XP
No other Cisco products are currently known to be affected by this vulnerability.