CVE-2015-6379: Undefined Security Weakness

The XML parser in the management interface in Cisco Adaptive Security Appliance ASA Software 8.4 allows remote authenticated users to cause a denial of service device crash via a crafted XML document, aka Bug ID CSCut14223...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns1)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns2)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

PT-2015-2743 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software version 8.4 Description: The issue is related to the XML parser in the management interface, which can cause system instability and potentially crash the device when a crafted XML document is...

Cisco Adaptive Security Appliance CX Context-Aware Security Information Disclosure Vulnerability

The Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software is an add-on service module for extending the ASA platform from Cisco USA. An information disclosure vulnerability exists in Cisco Adaptive Security Appliance CX Context-Aware Security 9.3. It allows an authenticated...

CVE-2015-6344: Exposure of Sensitive Information to an Unauthorized Actor

The web-based GUI in Cisco Adaptive Security Appliance ASA CX Context-Aware Security 9.34.1.11 allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105...

PT-2015-7193

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA CX Context-Aware Security version 9.34.1.11 Description The issue allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP...

Cisco ASA CX Context-Aware Security Web GUI Unauthorized Access Vulnerability

A vulnerability in the web-based GUI of Cisco Adaptive Security Appliance ASA CX Context-Aware Security could allow an authenticated, remote attacker to enumerate users and read user information without belonging to a role that allows those operations. The vulnerability is due to insufficient...

CVE-2015-6327

The IKEv1 implementation in Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.8, 9.2 before 9.24, and 9.3 before 9.33 allows remote attackers to cause a denial of service devic...

CVE-2015-6327

CVE-2015-6327 affects Cisco ASA: the IKEv1 implementation mishandles ISAKMP UDP packets, enabling a remote attacker to trigger a denial of service (device reload). Affected ASA versions include 7.2; 8.2 up to 8.2(5.58); 8.3 and 8.4 up to 8.4(7.29); 8.5–8.7 up to 8.7(1.17); 9.0 up to 9.0(4.37); 9....

CVE-2015-6324: Undefined Security Weakness

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA software 9.0 before 9.04.37, 9.1 before 9.16.6, 9.2 before 9.24, 9.3 before 9.33.5, and 9.4 before 9.42 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug IDs CSCus56252 an...

CVE-2015-6325: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.4, 9.2 before 9.24, 9.3 before 9.33.1, and 9.4 before 9.41.1 allows remote attackers to cause a denial of service device reloa...

PT-2015-7180 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA software versions 7.2 and 8.2 through 8.25.57 Cisco Adaptive Security Appliance ASA software versions 8.3 through 8.47.28 Cisco Adaptive Security Appliance ASA software versions 8.5 through 8.71.16 Cisco...

PT-2015-7179 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA software versions 7.2 and 8.2 before 8.25.58 Cisco Adaptive Security Appliance ASA software versions 8.3 and 8.4 before 8.47.29 Cisco Adaptive Security Appliance ASA software versions 8.5 through 8.7 befo...

CVE-2015-4321

Cisco ASA uRPF Bypass (CVE-2015-4321) affects ASA 9.3(1.50–3) and 9.4(1). The issue arises when an IP address belongs to an internal interface and also appears in the routing table, allowing spoofed packets to bypass uRPF validation due to insufficient input validation. Impact is bypass of uRPF c...

PT-2015-1894 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.31.50 through 9.33 Cisco Adaptive Security Appliance ASA Software version 9.41 Description: The Unicast Reverse Path Forwarding uRPF implementation in Cisco Adaptive Security Appliance...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall allows attackers to bypass the authentication process.

The vulnerability of the IKEv1 protocol implementation of the Cisco Adaptive Security Appliance is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures using specially crafted IKEv1 packets...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall, which allows a hacker to trigger a service failure.

The vulnerability of the SNMP network firewall implementation of Cisco Adaptive Security Appliance is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending numerous SNMP requests remotely...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall, which allows a hacker to trigger a service failure.

The vulnerability of Cisco Adaptive Security Appliance’s network interface layer is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service interruptions by sending specially crafted OSPFv2 packets...

CVE-2015-4458

The TLS implementation in the Cavium cryptographic-module firmware, as distributed with Cisco Adaptive Security Appliance ASA Software 9.15.21 and other products, does not verify the MAC field, which allows man-in-the-middle attackers to spoof TLS content by modifying packets, aka Bug ID CSCuu529...