Cisco ASA Detection (SNMP)

SNMP based detection of Cisco Adaptive Security Appliance ASA. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-9209

A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that would normally be blocked. Affected Products: The following Cisco products are vulnerable: Adaptive Security Appliance ASA 5500-X Series with FirePOWER...

Code injection

A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that would normally be blocked. Affected Products: The following Cisco products are vulnerable: Adaptive Security Appliance ASA 5500-X Series with FirePOWER...

CVE-2016-9209

CVE-2016-9209 is a Cisco FirePOWER vulnerability where TCP processing mishandles out-of-order segments before HTTP inspection, causing GZIP decompression to bypass and malware-blocking checks. Affected: ASA 5500-X with FirePOWER, AMP for Networks 7000/8000, FirePOWER 7000/8000 series, FirePOWER T...

CVE-2016-6461

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.16.10. Known Fixed Releases:...

Design/Logic Flaw

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.16.10. Known Fixed Releases:...

CVE-2016-6461

CVE-2016-6461 affects Cisco ASA: a vulnerability in the HTTP web-based management interface could allow an unauthenticated, remote attacker to inject arbitrary XML commands via improperly validated XML input. Affected release mentioned: 9.1(6.10). Recommended fixed releases (per sources): 100.11(...

Cisco ASA Input Validation File Injection Vulnerability (cisco-sa-20161116-asa)

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from ...

Cisco ASA Input Validation File Injection Vulnerability

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. The vulnerability is due to improper user input validation. An attacker could exploit th...

BlackNurse Spoofed ICMP Denial Of Service Proof Of Concept Vulnerability

Blacknurse is a low bandwidth ICMP attack that is capable of doing denial of service to well known firewalls. Most ICMP attacks that we see are based on ICMP Type 8 Code 0 also called a ping flood attack. BlackNurse is based on ICMP with Type 3 Code 3 packets. We know that when a user has allowed...

Even A Single Computer Can Take Down Big Servers Using BlackNurse Attack

Yes, you only need a single laptop with a decent internet connection, rather a massive botnet, to launch overwhelming denial of service DoS attacks in order to bring down major Internet servers and modern-day firewalls. Researchers at TDC Security Operations Center have discovered a new attack...

CVE-2016-6432

A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.62.1 could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker could...

CVE-2016-6431

A vulnerability in the local Certificate Authority CA feature of Cisco ASA Software before 9.61.5 could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper handling of crafted packets during the enrollment operation. An attacker...

CVE-2016-6431

A vulnerability in the local Certificate Authority CA feature of Cisco ASA Software before 9.61.5 could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper handling of crafted packets during the enrollment operation. An attacker...

Buffer overflow

A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.62.1 could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker could...

Design/Logic Flaw

A vulnerability in the local Certificate Authority CA feature of Cisco ASA Software before 9.61.5 could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper handling of crafted packets during the enrollment operation. An attacker...

CVE-2016-6432

A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.62.1 could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker could...

CVE-2016-6431

A vulnerability in the local Certificate Authority CA feature of Cisco ASA Software before 9.61.5 could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper handling of crafted packets during the enrollment operation. An attacker...

CVE-2016-6432

CVE-2016-6432 affects Cisco ASA Software, specifically the Identity Firewall feature. A buffer overflow in the NetBIOS data handling can be exploited by an unauthenticated, remote attacker sending a crafted NetBIOS packet, potentially allowing arbitrary code execution and/or a system reload. The ...

CVE-2016-6431

Cisco ASA Software before 9.6(1.5) is affected in the local Certificate Authority (CA) enrollment feature. A crafted HTTPS enrollment request to the ASA interface (where local CA allows user enrollment) can be exploited by an unauthenticated remote attacker to cause a reload of the device. Affect...