CSCus74398 On Cisco ASA 5520

[Alaa Darwish]

Dears,

Am having a PIM Multicast Registration Vulnerability on my cisco ASA 5520.

am not even configuring PIM and i've upgraded the IOS to the latest version and i still having the same vulnerability issue.

am using 916-10-K8.bin.

Any help?

[Akshay Rastogi]

Hi Alaa,

How did you found that your ASA is hitting this vulnerability as it has the condition that ASA must have multicast configuration. As you have mentioned that non of the multicast command is configured then this configuration is not valid.

You could run the below command to check if it is configured or not:

#show run multicast

#show run | in pim

If any output comes then perform 'no' in from of that command.

Also this behavior not seems to have your mentioned configuration. It is mainly for x-series ASA and all the affected version are 9.2 and above.

Please let me know if you have any queries.

Regards,

Akshay Rastogi

[Alaa Darwish]

Thank you so much Akshay.

I'll use your reply as an evidence to prove that this alarm is a false postive.

BR,

Abdallah

[Akshay Rastogi]

Hi Abdallah,

Sure.

Please mark the answered as correct if this answers your queries.

Regards,

Akshay Rastogi