CVE-2019-1934

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due to insufficient authorization validation...

CVE-2019-1945 Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

CVE-2019-1934 Cisco Adaptive Security Appliance Software Web-Based Management Interface Privilege Escalation Vulnerability

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due to insufficient authorization validation...

CVE-2019-1944 Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

CVE-2019-1944 Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

CVE-2019-1945: Improper Input Validation

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

CVE-2019-1944: Improper Input Validation

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance ASA could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these...

CVE-2019-1934: Improper Authorization

A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device. The vulnerability is due to insufficient authorization validation...

PT-2019-2937 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue is related to insufficient authorization validation in the web-based management interface of Cisco Adaptive Security Appliance ASA Software...

PT-2019-3080

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA affected versions not specified Description The issue is related to the smart tunnel functionality of Cisco Adaptive Security Appliance ASA, where multiple vulnerabilities could allow an authenticated, loc...

Cisco Adaptive Security Appliances Software and Cisco Firepower Threat Defense Resource Management Error Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

PT-2019-2776

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software affected versions not specified Description A vulnerability in the cryptographic driver could allow an unauthenticated, remote attacker to cause the devic...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability

According to its self-reported version, Adaptive Security Appliance Software or Cisco Firepower Threat Defense Software is affected by a vulnerability in the Deterministic Random Bit Generator DRBG, alsoknown as Pseudorandom Number Generator PRNG, used in Cisco Adaptive Security Appliance ASA...

The vulnerability of the TCP Proxy network interface functions of Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service interruptions.

The vulnerability of the TCP Proxy layer of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to errors in processing TCP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted TCP packe...

The vulnerability of the Deterministic Random Bit Generator component in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows a attacker to obtain the secret key of the vulnerable device.

The vulnerability of the Deterministic Random Bit Generator DRBG component in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense devices is related to the use of a weak entropy source for generating cryptographic keys. Exploiting this vulnerability could allow an attacker...

The vulnerability of the LDAP protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service failure.

The vulnerability of the LDAP protocol implementation in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to improper input validation. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted LDAP...

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense microprogramming systems lies in Ethernet packet filtering errors. This allows attackers to bypass L2-level filters and send data directly to the core of the vulnerable device.

The vulnerabilities of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense microprogramming systems are related to errors in Ethernet packet filtering. Exploiting these vulnerabilities allows attackers to bypass L2 filters and send data directly to the core of the vulnerable devi...

The vulnerability of the session dispatcher of the VPN service for remote access micro-programming environment-based Cisco Adaptive Security Appliance allows a hacker to trigger a service failure.

The vulnerability of the session dispatcher of the VPN service for remote access micro-programming environment of the Cisco Adaptive Security Appliance is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower 2100 microprogramming-based network interface controllers lies in the improper processing of IPsec sessions by the software cryptographic module. This allows attackers to cause service interruptions.

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower 2100 network interface controllers lies in the improper handling of IPsec sessions by the software cryptographic module. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the WebVPN microprogramming software for Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the WebVPN microprogramming software for Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending multiple login...