CVE-2015-0760: Improper Input Validation

The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259...

Design/Logic Flaw

The DNS implementation in Cisco Adaptive Security Appliance ASA Software 7.2 before 7.25.16, 8.2 before 8.25.57, 8.3 before 8.32.44, 8.4 before 8.47.28, 8.5 before 8.51.24, 8.6 before 8.61.17, 8.7 before 8.71.16, 9.0 before 9.04.33, 9.1 before 9.16.1, 9.2 before 9.23.4, and 9.3 before 9.33 allows...

CVE-2015-0675

The failover ipsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.16, 9.2 before 9.23.3, and 9.3 before 9.33 does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrativ...

CVE-2015-0677: Improper Input Validation

The XML parser in Cisco Adaptive Security Appliance ASA Software 8.4 before 8.47.28, 8.6 before 8.61.17, 9.0 before 9.04.33, 9.1 before 9.16, 9.2 before 9.23.4, and 9.3 before 9.33, when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a...

CVE-2015-0676: Improper Input Validation

The DNS implementation in Cisco Adaptive Security Appliance ASA Software 7.2 before 7.25.16, 8.2 before 8.25.57, 8.3 before 8.32.44, 8.4 before 8.47.28, 8.5 before 8.51.24, 8.6 before 8.61.17, 8.7 before 8.71.16, 9.0 before 9.04.33, 9.1 before 9.16.1, 9.2 before 9.23.4, and 9.3 before 9.33 allows...

CVE-2014-8023

Cisco Adaptive Security Appliance ASA Software 9.2.3 and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID...

CVE-2015-0619: Undefined Security Weakness

Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and SSL outage via multiple crafted HTTP requests, aka Bug ID CSCue05458...

Cisco Adaptive Security Appliance (ASA) Software Denial of Service Vulnerability (CNVD-2015-00992)

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A denial-of-service vulnerability exists in the Cisco Adaptive Security Appliance ASA Software, which can be exploited by an attacker to cause an affected appliance to cras...

Design/Logic Flaw

The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software 9.1.2 and earlier allows remote authenticated users to cause a denial of service device crash or error-recovery event via an HTTP request that triggers a rewrite, aka Bug ID...

CVE-2013-5557

The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software 9.1.2 and earlier allows remote authenticated users to cause a denial of service device crash or error-recovery event via an HTTP request that triggers a rewrite, aka Bug ID...

Cisco ASA Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCPv6 relay feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 packets. Cisco ASA Software is affected by this...

CVE-2015-0578: Improper Input Validation

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

CVE-2014-3410

The syslog-management subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then 1 sniffing the network for a syslog message or 2 reading a syslog message in a file on a syslog...

Design/Logic Flaw

The syslog-management subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then 1 sniffing the network for a syslog message or 2 reading a syslog message in a file on a syslog...

CVE-2014-3410: Exposure of Sensitive Information to an Unauthorized Actor

The syslog-management subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then 1 sniffing the network for a syslog message or 2 reading a syslog message in a file on a syslog...

CVE-2014-8012

Cisco ASA WebVPN Portal is affected by a DOM-based XSS in the Portal Login page (CVE-2014-8012). The vulnerability arises from mishandling of certain cookie attributes, allowing an unauthenticated, remote attacker to craft a link or action that executes arbitrary script/HTML in the user’s browser...

CVE-2014-3407

CVE-2014-3407 affects Cisco ASA SSL VPN in Software 9.3(.2) and earlier, where improper memory block allocation during HTTP packet processing lets a remote, unauthenticated attacker send crafted HTTP requests to exhaust memory and cause a denial of service. The vulnerability is tied to Bug ID CSC...

CVE-2014-3407: Uncontrolled Resource Consumption

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 9.3.2 and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCuq68888...

CVE-2014-3387

The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.25.14, 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.5 before 8.51.21, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.5, and 9.1 before 9.15.3 allows remote attackers to cause a denial of service device reloa...

CVE-2014-3382

The SQLNet inspection engine in Cisco ASA Software 7.2 before 7.25.13, 8.2 before 8.25.50, 8.3 before 8.32.42, 8.4 before 8.47.15, 8.5 before 8.51.21, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.5, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reloa...