Vulnerabilities fixed in Cisco Adaptive Security Appliance

🗓️ 11 Aug 2022 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 4 Views

Cisco ASA fixes address XSS, DoS, remote code execution, and data access with updates.

Reporter	Title	Published	Views	Family All 71
GithubExploit	Exploit for Code Injection in Cisco Adaptive_Security_Device_Manager	10 Feb 202221:52	–	githubexploit
ATTACKERKB	CVE-2022-20715	27 Apr 202216:00	–	attackerkb
ATTACKERKB	CVE-2022-20829	22 Jun 202216:00	–	attackerkb
ATTACKERKB	CVE-2022-20713	10 Aug 202223:00	–	attackerkb
ATTACKERKB	CVE-2022-20866	10 Aug 202223:00	–	attackerkb
BDU FSTEC	The vulnerability of the ASDM Launcher, a tool for managing Cisco Adaptive Security Device Manager (ASDM) network interfaces, allows a hacker to execute arbitrary code.	20 Jul 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the VPN Secure Sockets Layer (SSL) function in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause service interruptions.	17 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the check function of the Cisco Adaptive Security Device Manager (ASDM) in the Cisco Adaptive Security Appliance Software (ASA) allows a hacker to execute arbitrary code.	24 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Clientless SSL VPN (WebVPN) component of the Cisco Adaptive Security Appliance Software (ASA) allows a attacker to perform a “HTTP request hijacking” attack.	12 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of RSA key-generation functions in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to calculate secret RSA keys.	12 Aug 202200:00	–	bdu_fstec

11 Aug 2022 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.6 - 9.1

CVSS 29.3

EPSS0.53436

SSVC

cross site scripting denial of service remote code execution sensitive data access software updates cisco adaptive security appliance