Solved: ASA version 8.0 was End of

alfredobosca · ‎02-13-2016

The last week Cisco found a new vulnerability which advisory ID is CVE-2016-1287. I have a ASA 5520 with version 8.0(4), but this release doesn't appear on the list attached. Then, isn't affected this version?

Thanks in advance!

Karsten Iwen · ‎02-14-2016

ASA version 8.0 was End of Software Maintenance in Feb 2013. I would expect it to be vulnerable although not listed in that table.

If you have enough RAM to upgrade to 8.4, do that. If you don't have enough RAM you have to decide if you want to invest more money in a platform where all important EOL milestones are already reached.

View solution in original post

Karsten Iwen · ‎02-14-2016

ASA version 8.0 was End of Software Maintenance in Feb 2013. I would expect it to be vulnerable although not listed in that table.

If you have enough RAM to upgrade to 8.4, do that. If you don't have enough RAM you have to decide if you want to invest more money in a platform where all important EOL milestones are already reached.

Cisco ASA Vulnerability