Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

firewall services module vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv2
CVE-2013-1155
The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 prior to 3.2(20.1), 4.0 prior to 4.0(15.2), and 4.1 prior to 4.1(5.1) allows remote malicious users to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCtg02624.
Cisco Firewall Services Module Software 3.2\\(11\\)Cisco Firewall Services Module Software 3.2\\(10\\)Cisco Firewall Services Module Software 3.2\\(9\\)Cisco Firewall Services Module Software 3.2\\(8\\)Cisco Firewall Services Module Software 4.0\\(4\\)Cisco Firewall Services Module Software 4.0\\(14\\)Cisco Firewall Services Module Software 4.0\\(7\\)Cisco Firewall Services Module Software 4.0\\(6\\)Cisco Firewall Services Module Software 3.1Cisco Firewall Services Module Software 3.2\\(18\\)Cisco Firewall Services Module Software 3.2\\(15\\)Cisco Firewall Services Module Software 3.2\\(6\\)Cisco Firewall Services Module Software 3.2\\(5\\)Cisco Firewall Services Module Software 4.0\\(15\\)Cisco Firewall Services Module Software 4.0\\(2\\)Cisco Firewall Services Module Software 4.0\\(8\\)Cisco Firewall Services Module Software 4.0\\(11\\)Cisco Firewall Services Module Software 4.0\\(13\\)Cisco Firewall Services Module Software 4.1\\(4\\)Cisco Firewall Services Module Software 3.2\\(14\\)Cisco Firewall Services Module Software 3.2Cisco Firewall Services Module Software 3.2\\(1\\)
9
CVSSv2
CVE-2007-0968
Unspecified vulnerability in Cisco Firewall Services Module (FWSM) prior to 2.3(4.7) and 3.x prior to 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections.
Cisco Firewall Services Module 2.3Cisco Firewall Services Module 3.1
6.6
CVSSv2
CVE-2013-5506
The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x prior to 3.2(25) and 4.x prior to 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context's configuration via unspecified commands, aka Bug ID CS...
Cisco Firewall Services Module Software 4.0Cisco Firewall Services Module Software 4.0\\(10\\)Cisco Firewall Services Module Software 4.0\\(15\\)Cisco Firewall Services Module Software 4.0\\(3\\)Cisco Firewall Services Module Software 4.1\\(1\\)Cisco Firewall Services Module Software 4.1\\(3\\)Cisco Firewall Services Module Software 3.1\\(11\\)Cisco Firewall Services Module Software 3.1\\(13\\)Cisco Firewall Services Module Software 3.1\\(18\\)Cisco Firewall Services Module Software 3.1\\(2\\)Cisco Firewall Services Module Software 3.1\\(7\\)Cisco Firewall Services Module Software 3.1\\(9\\)Cisco Firewall Services Module Software 3.2\\(14\\)Cisco Firewall Services Module Software 3.2\\(16\\)Cisco Firewall Services Module Software 3.2\\(20\\)Cisco Firewall Services Module Software 3.2\\(22\\)Cisco Firewall Services Module Software 3.2\\(9\\)Cisco Firewall Services Module Software 4.0\\(11\\)Cisco Firewall Services Module Software 4.0\\(12\\)Cisco Firewall Services Module Software 4.0\\(13\\)Cisco Firewall Services Module Software 4.0\\(14\\)Cisco Firewall Services Module Software 4.1\\(5\\)
7.8
CVSSv2
CVE-2007-5570
Cisco Firewall Services Module (FWSM) 3.2(1), and 3.1(5) and previous versions, allows remote malicious users to cause a denial of service (device reload) via a crafted HTTPS request, aka CSCsi77844.
Cisco Firewall Services Module
6.8
CVSSv2
CVE-2007-5571
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and previous versions, does not properly enforce edited ACLs, which might allow remote malicious users to bypass intended restrictions on network traffic, aka CSCsj52536.
Cisco Firewall Services Module
7.1
CVSSv2
CVE-2014-0710
Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x prior to 3.2(28) and 4.x prior to 4.1(15) allows remote malicious users to cause a denial of service (device reload) via certain matching traffic, aka Bug ID CSCuj16824.
Cisco Firewall Services Module Software 3.1\\(12\\)Cisco Firewall Services Module Software 3.1\\(13\\)Cisco Firewall Services Module Software 3.1\\(14\\)Cisco Firewall Services Module Software 3.1\\(15\\)Cisco Firewall Services Module Software 3.1\\(8\\)Cisco Firewall Services Module Software 3.1\\(9\\)Cisco Firewall Services Module Software 3.2Cisco Firewall Services Module Software 3.2\\(1\\)Cisco Firewall Services Module Software 3.2\\(10\\)Cisco Firewall Services Module Software 3.2\\(22\\)Cisco Firewall Services Module Software 3.2\\(23\\)Cisco Firewall Services Module Software 3.2\\(24\\)Cisco Firewall Services Module Software 3.2\\(25\\)Cisco Firewall Services Module Software 3.1\\(10\\)Cisco Firewall Services Module Software 3.1\\(17\\)Cisco Firewall Services Module Software 3.1\\(19\\)Cisco Firewall Services Module Software 3.1\\(4\\)Cisco Firewall Services Module Software 3.1\\(6\\)Cisco Firewall Services Module Software 3.2\\(11\\)Cisco Firewall Services Module Software 3.2\\(13\\)Cisco Firewall Services Module Software 3.2\\(2\\)Cisco Firewall Services Module Software 3.2\\(21\\)
5.4
CVSSv2
CVE-2007-0964
Cisco FWSM 3.x prior to 3.1(3.18), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote malicious users to cause a denial of service (device reboot) via a malformed HTTPS request.
Cisco Firewall Services Module 3.1
7.8
CVSSv2
CVE-2007-0966
Cisco Firewall Services Module (FWSM) 3.x prior to 3.1(3.11), when the HTTPS server is enabled, allows remote malicious users to cause a denial of service (device reboot) via certain HTTPS traffic.
Cisco Firewall Services Module 3.1
7.8
CVSSv2
CVE-2007-0967
Cisco Firewall Services Module (FWSM) 3.x prior to 3.1(3.1) allows remote malicious users to cause a denial of service (device reboot) via malformed SNMP requests.
Cisco Firewall Services Module 3.1
7.8
CVSSv2
CVE-2007-0965
Cisco FWSM 3.x prior to 3.1(3.2), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote malicious users to cause a denial of service (device reboot) via a long HTTP request.
Cisco Firewall Services Module 3.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook