Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco asa 5500 firmware vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-0440
Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions prior to 3.5; as used in Cisco ASA appliance prior to 8.2(1), 8.1(2.7), and 8.0(5); allows remote malicious users to inject arbitrary web script or HTML via a craf...
Cisco Secure DesktopCisco Adaptive Security Appliance Software
8.6
CVSSv3
CVE-2018-0240
Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user to trigger a reload of an affected device, res...
Cisco Firepower Threat DefenseCisco Adaptive Security Appliance Software
6.5
CVSSv3
CVE-2018-0229
A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security Appliance (ASA) Software, and Cisco Firepower Threat Defense (FTD) Sof...
Cisco Anyconnect Secure Mobility Client 4.6\\(200\\)Cisco Adaptive Security Appliance Software 9.8\\(1.245\\)
6.7
CVSSv3
CVE-2019-1649
A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local malicious user to write a modified firmware image to the component. This vulnerability affects mul...
Cisco Asa 5500 FirmwareCisco Firepower 2100 FirmwareCisco Firepower 4000 FirmwareCisco Firepower 9000 FirmwareCisco Ons 15454 Mstp FirmwareCisco Analog Voice Network Interface Modules FirmwareCisco Integrated Services Router T1\\/e1 Voice And Wan Network Interface Modules FirmwareCisco Supervisor A\\+ FirmwareCisco Supervisor B\\+ FirmwareCisco 15454-m-wse-k9 FirmwareCisco Ios XeCisco IosCisco Industrial Security Appliances 3000 FirmwareCisco Integrated Services Router 4200 FirmwareCisco Integrated Services Router 4300 FirmwareCisco Integrated Services Router 4400 FirmwareCisco Asr 1000 Series FirmwareCisco Asr 1001 Firmware 16.0.0Cisco Ios Xr 7.0.1Cisco Catalyst 9800-40 Wireless Controller Firmware -Cisco Catalyst 9800-80 Wireless Controller Firmware -Cisco Ic3000-k9 Firmware
5.3
CVSSv3
CVE-2017-13081
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Debian Debian Linux 8.0Freebsd Freebsd 11Redhat Enterprise Linux Server 7Redhat Enterprise Linux Desktop 7Freebsd Freebsd 10.4Canonical Ubuntu Linux 17.04Opensuse Leap 42.2Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Freebsd Freebsd 11.1Freebsd Freebsd 10Freebsd FreebsdOpensuse Leap 42.3W1.fi Hostapd 2.4W1.fi Hostapd 2.3W1.fi Hostapd 0.6.9W1.fi Hostapd 0.6.8W1.fi Hostapd 0.4.10W1.fi Hostapd 0.4.9W1.fi Hostapd 0.2.8W1.fi Hostapd 0.2.6
5.3
CVSSv3
CVE-2017-13079
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Debian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux Server 7Freebsd Freebsd 10Freebsd Freebsd 10.4Opensuse Leap 42.2Canonical Ubuntu Linux 17.04Canonical Ubuntu Linux 16.04Freebsd Freebsd 11Freebsd Freebsd 11.1Redhat Enterprise Linux Desktop 7Freebsd FreebsdOpensuse Leap 42.3W1.fi Hostapd 2.4W1.fi Hostapd 2.3W1.fi Hostapd 0.6.10W1.fi Hostapd 0.6.9W1.fi Hostapd 0.4.11W1.fi Hostapd 0.4.10W1.fi Hostapd 0.4.9W1.fi Hostapd 0.2.8
6.8
CVSSv3
CVE-2017-13084
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Freebsd Freebsd 11Freebsd Freebsd 11.1Redhat Enterprise Linux Desktop 7Freebsd FreebsdCanonical Ubuntu Linux 17.04Canonical Ubuntu Linux 16.04Freebsd Freebsd 10Freebsd Freebsd 10.4Opensuse Leap 42.3Opensuse Leap 42.2Debian Debian Linux 9.0Debian Debian Linux 8.0Canonical Ubuntu Linux 14.04Redhat Enterprise Linux Server 7W1.fi Hostapd 2.3W1.fi Hostapd 2.2W1.fi Hostapd 0.6.9W1.fi Hostapd 0.6.8W1.fi Hostapd 0.4.10W1.fi Hostapd 0.4.9W1.fi Hostapd 0.4.8W1.fi Hostapd 0.2.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook