Information disclosure

The IPsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.11.7, when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service device reload via a 1 ICMP or 2 ICMPv6 packet that is improperly handled during decryption, aka Bug ID CSCue18975...

Authentication flaw

The SSL implementation in Cisco Adaptive Security Appliance ASA Software 9.0 before 9.02.6 and 9.1 before 9.12 allows remote attackers to bypass authentication, and obtain VPN access or administrative access, via a crafted X.509 client certificate, aka Bug ID CSCuf52468...

CVE-2013-3415

Cisco Adaptive Security Appliance ASA Software 8.4.x before 8.43 and 8.6.x before 8.61.3 does not properly manage memory upon an AnyConnect SSL VPN client disconnection, which allows remote attackers to cause a denial of service memory consumption, and forwarding outage or system hang via packets...

CVE-2013-5512

Race condition in the HTTP Deep Packet Inspection DPI feature in Cisco Adaptive Security Appliance ASA Software 8.2.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.45.5, 8.5.x before 8.51.18, 8.6.x before 8.61.12, 8.7.x before 8.71.4, 9.0.x before 9.01.4, and 9.1.x before 9.11.2, in certai...

CVE-2013-5509

The SSL implementation in Cisco Adaptive Security Appliance ASA Software 9.0 before 9.02.6 and 9.1 before 9.12 allows remote attackers to bypass authentication, and obtain VPN access or administrative access, via a crafted X.509 client certificate, aka Bug ID CSCuf52468...

CVE-2013-5515

CVE-2013-5515 affects Cisco ASA Software Clientless SSL VPN. The issue arises from improper handling of crafted HTTPS requests, enabling remote attackers to cause a denial of service (device reload). Affected software ranges from ASA 8.x through 9.1.x, with fixed releases per Bug CSCua22709: 8.2(...

CVE-2013-5508

CVE-2013-5508 affects Cisco ASA/ FWSM SQLNet Inspection Engine. The vulnerability allows remote attackers to cause a DoS (device reload) by sending crafted segmented TNS packets. Impacted versions include ASA software 7.x–9.1.x (with specific 7.2(5.12), 8.2(5.44), 8.3(2.39), 8.4(6), 8.5(1.18), 8....

CVE-2013-5513

Cisco Adaptive Security Appliance ASA Software 8.2.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.47, 8.5.x before 8.51.18, 8.6.x before 8.61.12, 8.7.x before 8.71.7, 9.0.x before 9.03.3, and 9.1.x before 9.11.8, when the DNS ALPI engine is enabled for TCP, allows remote attackers to caus...

CVE-2013-5511

The Adaptive Security Device Management ASDM remote-management feature in Cisco Adaptive Security Appliance ASA Software 8.2.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.5.x before 8.51.18, 8.6.x before 8.61.12, 8.7.x before 8.71.7, 9.0.x before 9.03.1, and 9.1.x before 9.12.6 doe...

CVE-2013-5509

The CVE-2013-5509 issue affects Cisco ASA Software: the SSL implementation allows remote attackers to bypass authentication and gain VPN or administrative access via a crafted X.509 client certificate. Affected versions are ASA 9.0 before 9.0(2.6) and 9.1 before 9.1(2). Remediation per sources is...

CVE-2013-5510

The remote-access VPN implementation in Cisco Adaptive Security Appliance ASA Software 7.x before 7.25.12, 8.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.6.x before 8.61.12, 9.0.x before 9.03.1, and 9.1.x before 9.12.5, when an override-account-disable option is enabled, does not...

CVE-2013-5512

CVE-2013-5512 is the race-condition vulnerability in Cisco ASA HTTP Deep Packet Inspection (DPI). Affected Cisco ASA Software multiple branches (8.2.x through 9.1.x) experience a DPI engine race under certain conditions (spoof-server option or ActiveX/Java response inspection) that can cause a re...

CVE-2013-5513

CVE-2013-5513 affects Cisco ASA Software where DNS ALPI engine, when enabled for TCP DNS, mishandles crafted DNS packets, causing a DoS (device reload). Affected series include 8.2.x up to 8.2(5.46), 8.3.x up to 8.3(2.39), 8.4.x up to 8.4(7), 8.5.x up to 8.5(1.18), 8.6.x up to 8.6(1.12), 8.7.x up...

CVE-2013-5507

CVE-2013-5507 affects Cisco ASA Software 9.1 prior to 9.1(1.7) when an IPsec VPN tunnel is enabled. The issue, due to improper handling of ICMP/ICMPv6 packets during decryption, can cause a denial of service resulting in a device reload. Root cause is an IPsec ICMP handling bug (Bug ID CSCue18975...

CVE-2013-5510

CVE-2013-5510 affects Cisco ASA Software Remote Access VPN authentication. The issue arises from improper parsing of LDAP responses from a remote AAA LDAP server when override-account-disable is enabled, allowing remote attackers to bypass authentication via a VPN connection. Widely documented in...

CVE-2013-3415

Cisco ASA Software (8.4.x before 8.4(3) and 8.6.x before 8.6(1.3)) is vulnerable to a denial-of-service caused by improper memory management when an AnyConnect SSL VPN client disconnects. The issue allows remote attackers to trigger memory consumption, forwarding outage, or system hang by sending...

Cisco ASA / FWSM multiple security vulnerabilities

Privilege escalation, authentication bypass, DoS...

Cisco Patches 11 Vulnerabilities in FWSM, ASA Products

Cisco pushed out patches for two products this week, addressing a handful of vulnerabilities in its Firewall Services Module FWSM software and Adaptive Security Appliance ASA software. According to security updates posted on the company’s Advisory page yesterday, at least nine separate...

Multiple Vulnerabilities in Cisco ASA Software

Cisco Adaptive Security Appliance ASA Software is affected by the following vulnerabilities: IPsec VPN Crafted ICMP Packet Denial of Service Vulnerability SQLNet Inspection Engine Denial of Service Vulnerability Digital Certificate Authentication Bypass Vulnerability Remote Access VPN...

PT-2013-5593 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.0 before 9.02.6 Cisco Adaptive Security Appliance ASA Software versions 9.1 before 9.12 Description: The SSL implementation in Cisco Adaptive Security Appliance ASA Software allows...