Design/Logic Flaw

The DNS implementation in Cisco Adaptive Security Appliance ASA Software 7.2 before 7.25.16, 8.2 before 8.25.57, 8.3 before 8.32.44, 8.4 before 8.47.28, 8.5 before 8.51.24, 8.6 before 8.61.17, 8.7 before 8.71.16, 9.0 before 9.04.33, 9.1 before 9.16.1, 9.2 before 9.23.4, and 9.3 before 9.33 allows...

Information disclosure

The failover ipsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.16, 9.2 before 9.23.3, and 9.3 before 9.33 does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrativ...

CVE-2015-0675

The failover ipsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.16, 9.2 before 9.23.3, and 9.3 before 9.33 does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrativ...

CVE-2015-0676

Cisco ASA DNS Memory Exhaustion Vulnerability (CVE-2015-0676) affects ASA Software versions listed in the Cisco advisory/PT-2015-1056. The issue arises in the DNS code when handling outbound queries, enabling a MITM-like sequence to trigger crafted DNS responses that exhaust memory and can cause ...

CVE-2015-0675

The failover ipsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.16, 9.2 before 9.23.3, and 9.3 before 9.33 does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrativ...

CVE-2015-0675

The CVE-2015-0675 issue affects Cisco ASA Software (failover IPsec feature) where failover communication messages are not properly validated. This allows a remote attacker to reconfigure an ASA device and potentially gain administrative control by sending crafted UDP packets over the local networ...

CVE-2015-0677

The XML parser in Cisco Adaptive Security Appliance ASA Software 8.4 before 8.47.28, 8.6 before 8.61.17, 9.0 before 9.04.33, 9.1 before 9.16, 9.2 before 9.23.4, and 9.3 before 9.33, when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a...

CVE-2015-0676

The DNS implementation in Cisco Adaptive Security Appliance ASA Software 7.2 before 7.25.16, 8.2 before 8.25.57, 8.3 before 8.32.44, 8.4 before 8.47.28, 8.5 before 8.51.24, 8.6 before 8.61.17, 8.7 before 8.71.16, 9.0 before 9.04.33, 9.1 before 9.16.1, 9.2 before 9.23.4, and 9.3 before 9.33 allows...

CVE-2015-0677

The CVE-2015-0677 issue affects Cisco ASA Software: the XML parser in ASA web/VPN components can be triggered by a crafted XML document to cause a denial of service (VPN outage or device reload). Affected versions include ASA 8.4 up to 8.4(7.28), 8.6 up to 8.6(1.17), 9.0 up to 9.0(4.33), 9.1 up t...

Cisco ASA Failover Command Injection Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability exists in the failover ipsec feature of Cisco ASA Software that stems from a failure to properly handle secure failover communication messages. An...

Cisco ASA VPN XML Parser Denial of Service Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability exists in Cisco ASA Software's XML parser that stems from a failure to effectively strengthen the XML parser configuration. It could be exploited b...

CVE-2015-0678

The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware CX Software before 9.3.2.1-9 allows remote attackers to cause a denial of service device reload by rapidly sending crafted packets to the management interface, aka Bug IDs...

Design/Logic Flaw

The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware CX Software before 9.3.2.1-9 allows remote attackers to cause a denial of service device reload by rapidly sending crafted packets to the management interface, aka Bug IDs...

CVE-2015-0678

CVE-2015-0678 affects Cisco ASA FirePOWER Software (prior to 5.3.1.2) and 5.4.x prior to 5.4.0.1, and ASA Context-Aware (CX) Software prior to 9.3.2.1-9. The vulnerability in the virtualization layer lets an unauthenticated remote attacker cause a denial of service (device reload) by rapidly send...

CVE-2015-0678

The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware CX Software before 9.3.2.1-9 allows remote attackers to cause a denial of service device reload by rapidly sending crafted packets to the management interface, aka Bug IDs...

Cisco ASA multiple security vulnerabilities

Commands injection, resources exhaustion, DoS...

Cisco ASA FirePOWER Services and Cisco ASA CX Services Crafted Packets Denial of Service Vulnerability

A vulnerability in the virtualization layer of the Cisco ASA FirePOWER Services and Cisco ASA Context Aware CX Services could allow an unauthenticated, remote attacker to cause the a reload of the affected system. Cisco has released software updates that address this vulnerability. The resolution...

Multiple Vulnerabilities in Cisco ASA Software

Cisco Adaptive Security Appliance ASA Software is affected by the following vulnerabilities: Cisco ASA Failover Command Injection Vulnerability Cisco ASA DNS Memory Exhaustion Vulnerability Cisco ASA VPN XML Parser Denial of Service Vulnerability Successful exploitation of the Cisco ASA Failover...

PT-2015-1056 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 7.2 through 7.25.15 Cisco Adaptive Security Appliance ASA Software versions 8.2 through 8.25.56 Cisco Adaptive Security Appliance ASA Software versions 8.3 through 8.32.43 Cisco Adaptive...

Cisco ASA TLS CBC Information Disclosure (CSCus08101)

According to its banner, the version of Cisco ASA software on the remote device is affected by an information disclosure vulnerability due to improper block cipher padding by TLSv1 when using Cipher Block Chaining CBC mode. A remote attacker, via an 'Oracle Padding' side channel attack, can explo...