Cisco ASA Security Bypass Vulnerability

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. A security bypass vulnerability exists in the Cisco ASA. Allows an attacker to bypass certain security restrictions and perform...

CVE-2012-5010

CVE-2012-5010 affects Cisco ASA devices (multiple models: 5515-X, 5510, 5555-X, 5512-X, 5520, 5505, 5525-X, 5540, 5585-X, 5580, 5545-X) with various software lineages (8.2–9.4.x). Root cause: ASA does not check the source of ARP requests or GARP packets for addresses NAT-translated under unspecif...

PT-2017-5202 · Cisco · Asa 5540 +10

Name of the Vulnerable Software and Affected Versions: ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance ASA Software versions 9.4.x through 9.4.0, 9.2.x through 9.2.3, 8.4.x through 8.4.6, 8.2.x through 8.2.4 ASA 5510 Adaptive Security Appliance Adaptive Security Appliance ASA...

Cisco ASA Software DNS Denial of Service Vulnerability

Cisco Adaptive Security Appliance ASA Software is the core operating system for the Cisco ASA family. A denial of service vulnerability in the DNS code of Cisco ASA Software can be exploited by an attacker to cause an affected device to reload or corrupt information in the device's local DNS cach...

CVE-2017-3793

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance ASA Software 8.0 through 8.7 and 9.0 through 9.6 and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all...

CVE-2017-6607

A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause an affected device to reload or corrupt the information present in the device's local DNS cache. The vulnerability is due to a flaw in handling crafted DNS response messages. An attacker...

CVE-2017-6609

A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets. An attacker could exploit this vulnerability by sending malformed IPsec packets ...

CVE-2017-6607

The CVE-2017-6607 issue affects Cisco ASA Software DNS handling. A crafted DNS response can be used by an unauthenticated remote attacker to cause the device to reload or corrupt its local DNS cache, leading to DoS or cache corruption. Impact applies to ASA in routed or transparent firewall mode,...

CVE-2017-6609

CVE-2017-6609 affects Cisco ASA Software IPsec handling. The vulnerability stems from improper parsing of malformed IPsec packets in the IPsec code, requiring an authenticated, remote attacker to establish a valid IPsec tunnel and send crafted traffic to the affected system. Exploitation can caus...

CVE-2017-6609

A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets. An attacker could exploit this vulnerability by sending malformed IPsec packets ...

PT-2017-16098 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.0 through 8.7 Cisco Adaptive Security Appliance ASA Software versions 9.0 through 9.6 Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A...

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software allows a perpetrator to bypass the access control list configuration.

The vulnerabilities of the Border Gateway Protocol BGP and Bidirectional Forwarding Detection BFD components of the Cisco Adaptive Security Appliance software-related networking devices are related to deficiencies in access control for certain functions. Exploiting these vulnerabilities can allow...

Cisco Adaptive Security Appliances Software Security Bypass Vulnerability

Cisco Adaptive Security Appliances ASA, Adaptive Security Appliances Software is a set of operating systems running in firewalls from the U.S. company Cisco Cisco. A security vulnerability exists in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation in Cisco ASA...

CVE-2017-3867

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. More Information:...

CVE-2017-3867

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. More Information:...

Cisco Adaptive Security Appliance BGP Bidirectional Forwarding Detection ACL Bypass Vulnerability (cisco-sa-20170315-asa)

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. Copyright C 2017...

Cisco Adaptive Security Appliance CX Context-Aware Security Denial of Service Vulnerability

Cisco Adaptive Security Appliance ASA CX Context-Aware Security is an add-on service module for extending the ASA platform from Cisco USA. A security vulnerability exists in the data plane IP fragment handler in the Cisco ASA CX Context-Aware Security module, which arises from the program's failu...

Cisco Releases Security Updates

Cisco has released several updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply th...

Cisco ASA Web Interface Remote XML Command Injection (cisco-sa-20161116-asa)

According to its self-reported version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by an XML command injection vulnerability in the web-based management interface due to improper validation of user-supplied input. An...

CVE-2016-9209

A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that would normally be blocked. Affected Products: The following Cisco products are vulnerable: Adaptive Security Appliance ASA 5500-X Series with FirePOWER...