Currently viewing the tag: "FWSM"

Cisco FWSM SCCP Inspection DoS Vulnerability

By On March 1, 2010 · 1 Comment

A vulnerability exists in the Cisco Firewall Services Module (FWSM) for the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers that may cause the Cisco FWSM to reload after processing a malformed Skinny Client Control Protocol (SCCP) message. The vulnerability exists when SCCP inspection is enabled.

Cisco has released free software updates that address this vulnerability.

All non-fixed 4.x versions of Cisco FWSM Software are affected by this vulnerability if SCCP inspection is enabled. SCCP inspection is enabled by default.

To check if [...]

Continue Reading →

Cisco Security Advisory: FWSM Crafted ICMP Message Vulnerability

By On August 21, 2009 · 8 Comments

Summary

A vulnerability exists in the Cisco Firewall Services Module (FWSM) for the Catalyst 6500 Series Switches and Cisco 7600 Series Routers. The vulnerability may cause the FWSM to stop forwarding traffic and may be triggered while processing multiple, crafted ICMP messages.

There are no known instances of intentional exploitation of this vulnerability. However, Cisco has observed data streams that appear to trigger this vulnerability unintentionally.

Cisco has released free software updates that address this vulnerability.

Successful exploitation of the vulnerability may cause the FWSM [...]

Continue Reading →

Cisco: FWSM CPU stress test how-to

By On February 6, 2009 · 2 Comments

Sometime ago I had to do a stress test for a Cisco FWSM (Firewall Service Module) to see how the resources are consumed and if some potential traffic can temporarly affect the behavior of this device. For those of you who have don’t know what is a Cisco FWSM, here comes the definition: “Cisco Firewall Services Module (FWSM)—a high-speed, integrated firewall module for Cisco Catalyst 6500 switches and Cisco 7600 Series routers—provides the fastest firewall data rates in the industry: 5-Gbps throughput, 100,000 CPS, and [...]

Continue Reading →

Cisco FWSM

By On February 3, 2009 · Leave a Comment

[flashvideo filename=http://www.firstdigest.com/vid/archive/2009/02/Cisco6500FWSM.flv image=http://www.firstdigest.com/vid/archive/2009/02/Cisco6500FWSM.jpg /]

Continue Reading →