Information disclosure

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

CVE-2019-1945 Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

CVE-2019-1945

Cisco ASA Smart Tunnel Vulnerabilities (CVE-2019-1945) affect the smart tunnel functionality in Cisco ASA Software. Authenticated local attackers could escalate privileges to root or load a malicious library during tunnel establishment. The issue is described across multiple sources (Cisco adviso...

CVE-2019-1934

CVE-2019-1934 affects Cisco ASA Software: a privilege-escalation flaw in the web-based management interface caused by insufficient authorization validation. An authenticated attacker with low privileges can log in and send crafted HTTPS requests to perform administrative actions, potentially comp...

CVE-2019-1934 Cisco Adaptive Security Appliance Software Web-Based Management Interface Privilege Escalation Vulnerability

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due to insufficient authorization validation...

CVE-2019-1944

The CVE-2019-1944 entry covers multiple vulnerabilities in Cisco ASA’s Smart Tunnel feature that could let an authenticated, local attacker elevate privileges to root or load a malicious library during tunnel establishment. Affected product: Cisco Adaptive Security Appliance (ASA) Software (Smart...

Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

PT-2019-3080

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA affected versions not specified Description The issue is related to the smart tunnel functionality of Cisco Adaptive Security Appliance ASA, where multiple vulnerabilities could allow an authenticated, loc...

PT-2019-3079

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA affected versions not specified Description The issue is related to the smart tunnel functionality of Cisco Adaptive Security Appliance ASA and is associated with insufficient access control. It could allo...

CVE-2019-1934: Improper Authorization

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due to insufficient authorization validation...

CVE-2019-1944: Improper Input Validation

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

Cisco Adaptive Security Appliance Software System Reboot DoS

The vulnerability of Microprogramming Software for Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to incomplete verification of input data for SSL and TLS protocol headers. Exploitation of this vulnerability can allow a malicious actor to trigger ...

CVE-2019-1873

A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incomplete input validation of a Secure...

CVE-2019-1873

A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incomplete input validation of a Secure...

Input validation

A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incomplete input validation of a Secure...

CVE-2019-1873 Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability

A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incomplete input validation of a Secure...

CVE-2019-1873

CVE-2019-1873 affects Cisco ASA Software and Firepower Threat Defense (FTD) software's cryptographic TLS/SSL driver. The issue stems from incomplete input validation of TLS/SSL ingress headers, allowing an unauthenticated, remote attacker with a valid TLS/SSL session to send crafted traffic that ...

CVE-2019-1873 Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability

A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incomplete input validation of a Secure...

Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability

A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incomplete input validation of a Secure...

PT-2019-2776

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software affected versions not specified Description A vulnerability in the cryptographic driver could allow an unauthenticated, remote attacker to cause the devic...