Cisco Adaptive Security Appliance Information Disclosure Vulnerability (CNVD-2016-00384)

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. Cisco Adaptive Security Appliance ASA Software version 8.4 failed to effectively protect sensitive data during AnyConnect clien...

CVE-2016-1295

Cisco Adaptive Security Appliance ASA Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775...

Cisco Adaptive Security Appliance Software Security Bypass Vulnerability

Cisco Adaptive Security Appliances is a set of firewall appliances from Cisco in the United States. The appliance also includes IPS, SSL VPN, IPSec VPN, anti-spam and other features. A security bypass vulnerability exists in Cisco Adaptive Security Appliance Software, which allows remote attacker...

PT-2016-4688 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software version 8.4 Description: A remote attacker can obtain sensitive information via an AnyConnect authentication attempt. This issue allows an unauthenticated, remote attacker to access sensitive dat...

PT-2016-3713 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.4.1 through 9.5.1 Description: The issue allows remote users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic. This is related to the DCERPC Inspection featur...

Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2015-07836)

Cisco Adaptive Security Appliance Software is a modular platform that provides security and VPN services from Cisco. A denial of service vulnerability exists in Cisco Adaptive Security Appliance Software 8.4 that could allow an authenticated remote user to cause a denial of service via a crafted...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns2)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Cisco ASA DNS DoS Vulnerability (cisco-sa-20151021-asa-dns1)

A vulnerability in the DNS code of Cisco ASA may lead to a denial of service. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

PT-2015-2743 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software version 8.4 Description: The issue is related to the XML parser in the management interface, which can cause system instability and potentially crash the device when a crafted XML document is...

Cisco Adaptive Security Appliance CX Context-Aware Security Information Disclosure Vulnerability

The Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software is an add-on service module for extending the ASA platform from Cisco USA. An information disclosure vulnerability exists in Cisco Adaptive Security Appliance CX Context-Aware Security 9.3. It allows an authenticated...

Cisco ASA CX Context-Aware Security Web GUI Unauthorized Access Vulnerability

A vulnerability in the web-based GUI of Cisco Adaptive Security Appliance ASA CX Context-Aware Security could allow an authenticated, remote attacker to enumerate users and read user information without belonging to a role that allows those operations. The vulnerability is due to insufficient...

CVE-2015-6327

The IKEv1 implementation in Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.8, 9.2 before 9.24, and 9.3 before 9.33 allows remote attackers to cause a denial of service devic...

CVE-2015-6327

CVE-2015-6327 affects Cisco ASA: the IKEv1 implementation mishandles ISAKMP UDP packets, enabling a remote attacker to trigger a denial of service (device reload). Affected ASA versions include 7.2; 8.2 up to 8.2(5.58); 8.3 and 8.4 up to 8.4(7.29); 8.5–8.7 up to 8.7(1.17); 9.0 up to 9.0(4.37); 9....

PT-2015-7179 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA software versions 7.2 and 8.2 before 8.25.58 Cisco Adaptive Security Appliance ASA software versions 8.3 and 8.4 before 8.47.29 Cisco Adaptive Security Appliance ASA software versions 8.5 through 8.7 befo...

PT-2015-7180 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA software versions 7.2 and 8.2 through 8.25.57 Cisco Adaptive Security Appliance ASA software versions 8.3 through 8.47.28 Cisco Adaptive Security Appliance ASA software versions 8.5 through 8.71.16 Cisco...

CVE-2015-4321

Cisco ASA uRPF Bypass (CVE-2015-4321) affects ASA 9.3(1.50–3) and 9.4(1). The issue arises when an IP address belongs to an internal interface and also appears in the routing table, allowing spoofed packets to bypass uRPF validation due to insufficient input validation. Impact is bypass of uRPF c...

PT-2015-1894 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.31.50 through 9.33 Cisco Adaptive Security Appliance ASA Software version 9.41 Description: The Unicast Reverse Path Forwarding uRPF implementation in Cisco Adaptive Security Appliance...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall allows attackers to bypass the authentication process.

The vulnerability of the IKEv1 protocol implementation of the Cisco Adaptive Security Appliance is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures using specially crafted IKEv1 packets...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall, which allows a hacker to trigger a service failure.

The vulnerability of the SNMP network firewall implementation of Cisco Adaptive Security Appliance is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending numerous SNMP requests remotely...

The vulnerability of Cisco Adaptive Security Appliance’s network firewall, which allows a hacker to trigger a service failure.

The vulnerability of Cisco Adaptive Security Appliance’s network interface layer is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service interruptions by sending specially crafted OSPFv2 packets...