Vulnerabilities fixed in Cisco Adaptive Security Appliance (ASA)

🗓️ 28 Oct 2021 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 7 Views

Cisco ASA fixes bypass and denial of service without authentication; CVE-2021-1444 enables management scripting.

Reporter	Title	Published	Views	Family All 165
BDU FSTEC	The vulnerability of the SSL/TLS module of the microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.	2 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) web service interfaces allows attackers to execute cross-site scripting (XSS) attacks.	2 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web-based network interface of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.	2 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web-based network interface of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.	2 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the File Transfer Protocol (FTP) implementation and the NAT functions of the Application Layer Gateway (ALG) in microprogrammable network devices such as Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to circumvent security restrictions and establish unauthorized connections.	12 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SSL/TLS message processor in microprogramming network devices from Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service failures.	12 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a perpetrator to cause service interruptions.	12 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SNMPv3 implementation of the microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to circumvent security restrictions and gain unauthorized access to protected information.	12 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the IDFW rule processing function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) software allows attackers to circumvent security restrictions.	25 Nov 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Session Initiation Protocol (SIP) implementation and the Network Address Translation (NAT) function of the Application Layer Gateway (ALG) in microprogrammable network interface devices from Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to circumvent security restrictions and establish unauthorized connections.	25 Nov 202100:00	–	bdu_fstec

28 Oct 2021 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.18.6

CVSS 27.8

EPSS0.0155

SSVC

Cisco ASA bypass vulnerability denial of service management scripting cross site scripting