CVE-2019-1705

CVE-2019-1705 affects Cisco ASA Software, specifically the remote access VPN session manager. The vulnerability allows an unauthenticated, remote attacker to cause a denial of service by requesting an excessive number of remote access VPN sessions. The root cause is described as an issue with the...

CVE-2019-1708

CVE-2019-1708 affects Cisco ASA and Cisco FTD, where MOBIKE processing vulnerability can cause unauthenticated remote attackers to trigger memory leak or device reload, leading to DoS. Root cause: incorrect handling of certain MOBIKE packets. Impact: memory exhaustion and potential reloads on IPv...

CVE-2019-1701

Cisco CVE-2019-1701 covers multiple WebVPN XSS vulnerabilities in Cisco ASA and Firepower Threat Defense (FTD). Affected component: WebVPN portal; root cause: insufficient input validation allowing crafted links to execute arbitrary script in the user’s browser. Prerequisites: attacker must have ...

CVE-2019-1695

A vulnerability in the detection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to send data directly to the kernel of an affected device. The vulnerability exists because the software...

CVE-2019-1695

A vulnerability in the detection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to send data directly to the kernel of an affected device. The vulnerability exists because the software...

CVE-2019-1694

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability i...

Race condition

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

Design/Logic Flaw

A vulnerability in the detection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to send data directly to the kernel of an affected device. The vulnerability exists because the software...

Design/Logic Flaw

A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper management o...

CVE-2019-1687

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

Race condition

A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing...

Race condition

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability i...

CVE-2019-1693

A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper management o...

CVE-2019-1697

CVE-2019-1697 describes a denial-of-service vulnerability in Cisco ASA/FTD LDAP handling. An unauthenticated remote attacker can send crafted LDAP BER packets that are parsed by the device, causing it to reload. Root cause: improper parsing of LDAP packets. Affected: Cisco ASA Software and Firepo...

CVE-2019-1697 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial ...

CVE-2019-1694

CVE-2019-1694 affects Cisco ASA/FTD TCP processing engine. The issue arises from improper handling of TCP traffic, where sending a specific sequence of packets at a high rate can cause the device to reboot, temporarily disrupting traffic (DoS). Affected products include ASA/FTD software; exploita...

CVE-2019-1695

The CVE-2019-1695 issue affects Cisco ASA and Cisco FTD, where the detection engine improperly filters Ethernet frames, allowing an unauthenticated, adjacent attacker to bypass Layer 2 filters and send data directly to the kernel via crafted packets to the management interface. This can trigger a...

CVE-2019-1695 Cisco Adaptive Security Appliance and Firepower Threat Defense Software Layer 2 Filtering Bypass Vulnerability

A vulnerability in the detection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to send data directly to the kernel of an affected device. The vulnerability exists because the software...

CVE-2019-1693

The CVE-2019-1693 issue affects Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software, specifically the WebVPN portal. The root cause is improper management of authenticated WebVPN sessions, which can be exploited by an attacker with valid credentials ...

CVE-2019-1693 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability

A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper management o...