CVE-2015-0619: Undefined Security Weakness

Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to cause a denial of service memory consumption and SSL outage via multiple crafted HTTP requests, aka Bug ID CSCue05458...

CVE-2013-5557

The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software 9.1.2 and earlier allows remote authenticated users to cause a denial of service device crash or error-recovery event via an HTTP request that triggers a rewrite, aka Bug ID...

CVE-2013-5557: Undefined Security Weakness

The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance ASA Software 9.1.2 and earlier allows remote authenticated users to cause a denial of service device crash or error-recovery event via an HTTP request that triggers a rewrite, aka Bug ID...

Cisco Adaptive Security Device Manager (ASDM) Detection (HTTP)

HTTP based detection of Cisco Adaptive Security Device Manager ASDM. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2015-00430)

Cisco Adaptive Security Appliance Software is a modular platform that provides security and VPN services. A denial of service vulnerability exists in Cisco Adaptive Security Appliance Software that could allow a remote attacker to launch a denial of service attack by crafting DHCP packets on the...

CVE-2015-0578

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

PT-2015-4725 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A issue in the DHCPv6 relay feature allows remote attackers to cause a denial of service, resulting in a device reload, via crafted DHCP packets on th...

CVE-2015-0578: Improper Input Validation

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

CVE-2014-3410: Exposure of Sensitive Information to an Unauthorized Actor

The syslog-management subsystem in Cisco Adaptive Security Appliance ASA Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and then 1 sniffing the network for a syslog message or 2 reading a syslog message in a file on a syslog...

CVE-2014-8012

Cross-site scripting XSS vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695...

CVE-2014-8012: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance ASA Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695...

Design/Logic Flaw

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 9.3.2 and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCuq68888...

CVE-2014-3407: Uncontrolled Resource Consumption

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 9.3.2 and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCuq68888...

PT-2014-5296

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 9.3.2 and earlier Description The issue is related to the SSL VPN implementation, which does not properly allocate memory blocks during HTTP packet handling. This allows remote attackers ...

CVE-2014-3399: Improper Control of Generation of Code

The SSL VPN implementation in Cisco Adaptive Security Appliance ASA Software 9.2.2.4 and earlier does not properly manage session information during creation of a SharePoint handler, which allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs, and...

PT-2014-5289

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 9.2.2.4 and earlier Description The issue is related to the SSL VPN implementation, which does not properly manage session information during the creation of a SharePoint handler. This...

CVE-2013-6691

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

CVE-2013-5567: Uncontrolled Resource Consumption

Cisco Adaptive Security Appliance ASA Software 8.4.6 and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause a denial of service traffic loop and device crash via a packet that triggers multiple matches, aka Bug...

CVE-2013-6691: Improper Restriction of Operations within the Bounds of a Memory Buffer

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance ASA Software 9.0.4.1 and earlier allows remote CIFS servers to cause a denial of service device reload via a long share list, aka Bug ID CSCuj83344...

PT-2014-2936

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 8.4.6 and earlier Description A issue in the inspection and filter features of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause the...