Cisco ASA VPN Failover Command Injection Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the VPN code of Cisco ASA Software could allow an authenticated, remote attacker to submit configuration commands to the standby unit via the failover interface. As result, an attacker could be able to take full control of both the active and standby failover units. Copyright C...

Cisco ASA SunRPC Inspection Engine DoS Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the SunRPC inspection engine of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the reload of an affected system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cisco ASA IKEv2 DoS Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the IKEv2 code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the reload of an affected system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Cisco ASA SQL*NET Inspection Engine DoS Vulnerability (cisco-sa-20141008-asa)

A vulnerability in SQLNet inspection engine code could allow an unauthenticated, remote attacker to cause a reload of the affected system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cisco ASA VPN DoS Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the IKE code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the reload of an affected system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Cisco ASA Clientless SSL VPN Portal Customization Integrity Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the Clientless SSL VPN portal customization framework could allow an unauthenticated, remote attacker to modify the content of the Clientless SSL VPN portal, which could lead to several attacks including the stealing of credentials, cross-site scripting XSS, and other types of...

Cisco ASA Smart Call Home Digital Certificate Validation Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the Smart Call Home SCH feature of Cisco ASA Software could allow an unauthenticated, remote attacker to bypass digital certificate validation if any feature that uses digital certificates is configured on the affected system. Copyright C 2015 Greenbone Networks GmbH Some text...

Cisco ASA Local Path Inclusion Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the function that exports environment variables of Cisco ASA Software could allow an authenticated, local attacker to inject a malicious library and take complete control of the system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

Cisco ASA DNS Inspection Engine DoS Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the DNS inspection engine of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the reload of an affected system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cisco ASA VNMC Command Input Validation Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the Virtual Network Management Center VNMC policy code of Cisco ASA Software could allow an authenticated, local attacker to access the underlying Linux operating system with the privileges of the root user. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might ...

Cisco ASA Health and Performance Monitor DoS Vulnerability (cisco-sa-20141008-asa)

A vulnerability in Health and Performance Monitoring HPM for ASDM functionality of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of an affected device and eventual denial of service DoS condition. Copyright C 2015 Greenbone Networks GmbH Some text descriptio...

Cisco ASA Clientless VPN Information Disclosure and DoS Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the Clientless SSL VPN portal feature could allow an unauthenticated, remote attacker to access random memory locations. Due to this vulnerability, the attacker may be able to access the information stored in memory and in some cases may be able to corrupt this portion of memor...

Cisco ASA GPRS Tunneling Protocol Inspection Engine DoS Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the GPRS Tunneling Protocol GTP inspection engine of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the reload of an affected system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and a...

Cisco ASA SSL VPN Remote Information Disclosure (CSCuq65542)

Binary data ciscoasaverinfodisclosure.nbin...

Cisco ASA Detection (SSH)

This script performs SSH based detection of Cisco ASA SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-8023

Cisco Adaptive Security Appliance ASA Software 9.2.3 and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID...

CVE-2014-8023

Cisco ASA Software 9.2(.3) and earlier is affected by a vulnerability in challenge‑response tunnel group selection. Improper implementation allows an authenticated remote attacker to bypass resource access restrictions by crafting a tunnel-group parameter, potentially enabling access to resources...

CVE-2014-8023

Cisco Adaptive Security Appliance ASA Software 9.2.3 and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID...

Cisco ASA Challenge-Response Tunnel Group Selection Bypass Vulnerability

A vulnerability in the authentication code of Cisco ASA Software could allow an authenticated, remote attacker to access resources of a VPN tunnel group. The vulnerability is due to improper implementation of the tunnel group selection when a user authenticates to the remote access VPN via the...

Cisco Adaptive Security Appliance WebVPN Embedded Web Server Denial of Service Vulnerability

A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to force the ASA to stop accepting new SSL connections. The vulnerability is due to a memory leak in the WebVPN embedded web server. An attacker could exploit this...