CVE-2015-4241: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA Software 9.32 allows remote attackers to cause a denial of service system reload by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCut52679...

Cisco Adaptive Security Appliance Software OSPFv2 Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First version 2 OSPFv2 code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of the affected system. The vulnerability is due to improper handling of OSPFv2 packets. An attacker could...

Cisco Adaptive Security Appliance SNMP Denial of Service Vulnerability

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. A security vulnerability exists in the SNMP code of the Cisco Adaptive Security Appliance, which can be exploited by an...

CVE-2015-4239: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA Software 9.32.243 and 100.130.21 allows remote attackers to cause a denial of service device reload by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCus84220...

Cisco Adaptive Security Appliance Software OSPFv2 Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First version 2 OSPFv2 code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of the affected system. The vulnerability is due to improper handling of OSPFv2 packets. An attacker could...

CVE-2015-4238: Undefined Security Weakness

The SNMP implementation in Cisco Adaptive Security Appliance ASA Software 8.47 and 8.61.2 allows remote authenticated users to cause a denial of service device reload by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601...

PT-2015-1620 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.47 through 8.61.2 Description: The issue is related to the SNMP implementation and is caused by resource management errors. It allows a remote authenticated user to cause a denial of...

CVE-2015-4550

The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance ASA devices with software 9.33 and 9.41.1 does not verify the AES-GCM Integrity Check Value ICV octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, ak...

Cisco Adaptive Security Appliance XAUTH Security Feature Bypass Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security feature bypass vulnerability exists in the Cisco Adaptive Security Appliance, which can be exploited by an authenticated remote attacker to bypass XAUTH...

CVE-2015-0742: Undefined Security Weakness

The Protocol Independent Multicast PIM application in Cisco Adaptive Security Appliance ASA Software 9.20.0, 9.20.104, 9.23.1, 9.23.4, 9.31.105, 9.32.100, 9.40.115, 100.130.21, 100.1320.3, 100.1321.9, and 100.141.1 does not properly implement multicast-forwarding registration, which allows remote...

Design/Logic Flaw

The XML parser in Cisco Adaptive Security Appliance ASA Software 8.4 before 8.47.28, 8.6 before 8.61.17, 9.0 before 9.04.33, 9.1 before 9.16, 9.2 before 9.23.4, and 9.3 before 9.33, when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a...

CVE-2015-0675: Improper Access Control

The failover ipsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.16, 9.2 before 9.23.3, and 9.3 before 9.33 does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrativ...

CVE-2015-0676: Improper Input Validation

The DNS implementation in Cisco Adaptive Security Appliance ASA Software 7.2 before 7.25.16, 8.2 before 8.25.57, 8.3 before 8.32.44, 8.4 before 8.47.28, 8.5 before 8.51.24, 8.6 before 8.61.17, 8.7 before 8.71.16, 9.0 before 9.04.33, 9.1 before 9.16.1, 9.2 before 9.23.4, and 9.3 before 9.33 allows...

CVE-2015-0677: Improper Input Validation

The XML parser in Cisco Adaptive Security Appliance ASA Software 8.4 before 8.47.28, 8.6 before 8.61.17, 9.0 before 9.04.33, 9.1 before 9.16, 9.2 before 9.23.4, and 9.3 before 9.33, when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a...

PT-2015-1055

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 9.1 through 9.15 Cisco Adaptive Security Appliance ASA Software versions 9.2 through 9.23.2 Cisco Adaptive Security Appliance ASA Software versions 9.3 through 9.32 Description The failov...

Cisco Adaptive Security Appliance (ASA) Software Remote Security Bypass Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability in the Cisco Adaptive Security Appliance validation code allows remote attackers to exploit the vulnerability to gain access to the resources of a...

Authentication flaw

Cisco Adaptive Security Appliance ASA Software 9.2.3 and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID...

CVE-2014-8023: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA Software 9.2.3 and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID...

PT-2015-3988

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions 9.2.3 and earlier Description The issue allows remote authenticated users to bypass intended resource-access restrictions. This is due to the improper selection of tunnel groups when...

Cisco Adaptive Security Appliance (ASA) Software Denial of Service Vulnerability (CNVD-2015-01124)

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A denial of service vulnerability exists in the Cisco Adaptive Security Appliance ASA Software, which can be exploited by attackers to launch denial of service attacks...