cisco adaptive security appliance software 9.5.1 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv3

The DCERPC Inspection implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 up to and including 9.5.1 allows remote authenticated users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic, aka Bug ID CSCuu67782.

Cisco Adaptive Security Appliance Software 9.4.1.2 Cisco Adaptive Security Appliance Software 9.4.2 Cisco Adaptive Security Appliance Software 9.5.1 Cisco Adaptive Security Appliance Software 9.4.1.5 Cisco Adaptive Security Appliance Software 9.4.1.3 Cisco Adaptive Security Appliance Software 9.4.1 Cisco Adaptive Security Appliance Software 9.4.1.1

6.5

CVSSv3

Cisco Adaptive Security Appliance (ASA) Software 9.0 up to and including 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to cause a denial of service (memory consumption) via crafted (1) LAN-to-LAN or (2) Remote Access VPN tunnel packets, aka Bug ...

Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.1.1.4 Cisco Adaptive Security Appliance Software 9.1.4 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.1.5.21 Cisco Adaptive Security Appliance Software 9.1.3 Cisco Adaptive Security Appliance Software 9.1.2 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.1.2.8 Cisco Adaptive Security Appliance Software 9.1.5.15 Cisco Adaptive Security Appliance Software 9.1.5.10 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.1.5 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.1.5.12 Cisco Adaptive Security Appliance Software 9.1.3.2 Cisco Adaptive Security Appliance Software 9.1.4.5

1 Article

7.7

CVSSv3

A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software could allow an authenticated, remote malicious user to cause a reload of an affected system. The vulnerability is due to insufficient validation of the IKEv1 XAUTH parameters passed du...

Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.1.1.4 Cisco Adaptive Security Appliance Software 9.1.4 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.1.5.21 Cisco Adaptive Security Appliance Software 9.1.3 Cisco Adaptive Security Appliance Software 9.1.2 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.1.2.8 Cisco Adaptive Security Appliance Software 9.1.5.15 Cisco Adaptive Security Appliance Software 9.1.5.10 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.1.5 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.1.5.12 Cisco Adaptive Security Appliance Software 9.1.3.2 Cisco Adaptive Security Appliance Software 9.1.4.5

8.6

CVSSv3

A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code of Cisco ASA Software could allow an unauthenticated, remote malicious user to cause a reload of the affected system. The vulnerability is due to improper parsing of crafted SSL or TLS packe...

Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.1.1.4 Cisco Adaptive Security Appliance Software 9.1.4 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.1.5.21 Cisco Adaptive Security Appliance Software 9.1.3 Cisco Adaptive Security Appliance Software 9.1.2 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.1.2.8 Cisco Adaptive Security Appliance Software 9.1.5.15 Cisco Adaptive Security Appliance Software 9.1.5.10 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.1.5 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.1.5.12 Cisco Adaptive Security Appliance Software 9.1.3.2 Cisco Adaptive Security Appliance Software 9.1.4.5

5.9

CVSSv3

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote malicious user to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.1(6.10...

Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.2.2 Cisco Adaptive Security Appliance Software 9.3.3.2 Cisco Adaptive Security Appliance Software 9.5.2.10 Cisco Adaptive Security Appliance Software 9.4.3 Cisco Adaptive Security Appliance Software 9.4.3.4 Cisco Adaptive Security Appliance Software 9.4.3.11 Cisco Adaptive Security Appliance Software 9.2\\(3.1\\)Cisco Adaptive Security Appliance Software 9.3\\(2.100\\)Cisco Adaptive Security Appliance Software 9.4.3.3 Cisco Adaptive Security Appliance Software 9.4.2.3 Cisco Adaptive Security Appliance Software 9.4.3.8 Cisco Adaptive Security Appliance Software 9.2.4.16 Cisco Adaptive Security Appliance Software 9.2\\(0.104\\)

7.7

CVSSv3

A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote malicious user to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets. An attacker could exploit this vulnerability by sending m...

Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.1.1.4 Cisco Adaptive Security Appliance Software 9.1.4 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.1.5.21 Cisco Adaptive Security Appliance Software 9.1.3 Cisco Adaptive Security Appliance Software 9.1.2 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.1.2.8 Cisco Adaptive Security Appliance Software 9.1.5.15 Cisco Adaptive Security Appliance Software 9.1.5.10 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.1.5 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.1.5.12 Cisco Adaptive Security Appliance Software 9.1.3.2 Cisco Adaptive Security Appliance Software 9.1.4.5

8.1

CVSSv3

A vulnerability in the Identity Firewall feature of Cisco ASA Software prior to 9.6(2.1) could allow an unauthenticated, remote malicious user to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code ...

Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.1.1.4 Cisco Adaptive Security Appliance Software 9.1.4 Cisco Adaptive Security Appliance Software 8.6.1.12 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.1.5.21 Cisco Adaptive Security Appliance Software 9.1.3 Cisco Adaptive Security Appliance Software 9.1.2 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.1.2.8 Cisco Adaptive Security Appliance Software 9.1.5.15 Cisco Adaptive Security Appliance Software 9.1.5.10 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.1.5 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.1.5.12 Cisco Adaptive Security Appliance Software 9.1.3.2

7.5

CVSSv3

A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software prior to 9.6(1.5) could allow an unauthenticated, remote malicious user to cause a reload of the affected system. The vulnerability is due to improper handling of crafted packets during the enro...

Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.1.1.4 Cisco Adaptive Security Appliance Software 9.1.4 Cisco Adaptive Security Appliance Software 8.6.1.12 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.1.5.21 Cisco Adaptive Security Appliance Software 9.1.3 Cisco Adaptive Security Appliance Software 9.1.2 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.1.2.8 Cisco Adaptive Security Appliance Software 9.1.5.15 Cisco Adaptive Security Appliance Software 9.1.5.10 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.1.5 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.1.5.12 Cisco Adaptive Security Appliance Software 9.1.3.2

4

CVSSv3

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0 up to and including 8.7 and 9.0 up to and including 9.6) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user to cause Cisco ASA and F...

Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.1.1.4 Cisco Adaptive Security Appliance Software 9.1.4 Cisco Adaptive Security Appliance Software 8.6.1.12 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.1.5.21 Cisco Adaptive Security Appliance Software 9.1.3 Cisco Adaptive Security Appliance Software 9.1.2 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.1.2.8 Cisco Adaptive Security Appliance Software 9.1.5.15 Cisco Adaptive Security Appliance Software 9.1.5.10 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.1.5 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.1.5.12 Cisco Adaptive Security Appliance Software 9.1.3.2

8.7

CVSSv3

A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote malicious user to cause an affected device to reload or corrupt the information present in the device's local DNS cache. The vulnerability is due to a flaw in handling crafted DNS re...

Cisco Adaptive Security Appliance Software 9.3.2 Cisco Adaptive Security Appliance Software 9.1.1.4 Cisco Adaptive Security Appliance Software 9.1.4 Cisco Adaptive Security Appliance Software 9.2.2.7 Cisco Adaptive Security Appliance Software 9.1.5.21 Cisco Adaptive Security Appliance Software 9.1.3 Cisco Adaptive Security Appliance Software 9.1.2 Cisco Adaptive Security Appliance Software 9.2.3 Cisco Adaptive Security Appliance Software 9.3.1.1 Cisco Adaptive Security Appliance Software 9.1.1 Cisco Adaptive Security Appliance Software 9.2.2.8 Cisco Adaptive Security Appliance Software 9.3.1 Cisco Adaptive Security Appliance Software 9.1.2.8 Cisco Adaptive Security Appliance Software 9.1.5.15 Cisco Adaptive Security Appliance Software 9.1.5.10 Cisco Adaptive Security Appliance Software 9.2.1 Cisco Adaptive Security Appliance Software 9.3.2.2 Cisco Adaptive Security Appliance Software 9.1.5 Cisco Adaptive Security Appliance Software 9.2.2.4 Cisco Adaptive Security Appliance Software 9.1.5.12 Cisco Adaptive Security Appliance Software 9.1.3.2 Cisco Adaptive Security Appliance Software 9.1.4.5

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook