Cisco Firewall Services Module (FWSM) Version

The remote host has a Cisco Firewall Services Module FWSM. It is possible to read the FWSM version by connecting to the switch using SSH. TRUSTED...

Firewall Services Module Crafted ICMP Message (cisco-sa-20090819-fwsm)

The remote Cisco Firewall Services Module FWSM for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers may be affected by a denial of service DoS condition. An attacker can trigger the DoS condition by sending a specially crafted ICMP packet to the device. This will cause the networ...

Cisco IOS / ASA / FWSM / NX-OS / StarOS OSPF protocol vulnerability

LSA packet routing table manipulation...

CVE-2013-0149

The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement LSA type 1 packets before performing operations on the LSA database,...

CVE-2013-1195

The time-based ACL implementation on Cisco Adaptive Security Appliances ASA devices, and in Cisco Firewall Services Module FWSM, does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic...

Command injection

The time-based ACL implementation on Cisco Adaptive Security Appliances ASA devices, and in Cisco Firewall Services Module FWSM, does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic...

CVE-2013-1195

CVE-2013-1195 affects Cisco ASA and Cisco FWSM time-based ACL handling. The time-range object does not properly process periodic statements, allowing remote attackers to bypass access lists by sending traffic during denied time periods. Root cause: improper implementation of the time-range period...

CVE-2013-1195

The time-based ACL implementation on Cisco Adaptive Security Appliances ASA devices, and in Cisco Firewall Services Module FWSM, does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic...

Cisco ASA / FWSM multiple security vulnerabilities

Multiple DoS conditions...

CVE-2013-1193

The Secure Shell SSH implementation on Cisco Adaptive Security Appliances ASA devices, and in Cisco Firewall Services Module FWSM, does not properly terminate sessions, which allows remote attackers to cause a denial of service SSH service outage by repeatedly establishing SSH connections, aka Bu...

CVE-2013-1193

CVE-2013-1193 affects Cisco ASA and Cisco FWSM SSH handling, where improper termination of SSH sessions allows an attacker to cause a denial of service by repeatedly opening SSH connections. Public docs confirm the issue and reference Cisco advisory Cisco-SA-20130412-CVE-2013-1193; some sources a...

CVE-2013-1193: Undefined Security Weakness

The Secure Shell SSH implementation on Cisco Adaptive Security Appliances ASA devices, and in Cisco Firewall Services Module FWSM, does not properly terminate sessions, which allows remote attackers to cause a denial of service SSH service outage by repeatedly establishing SSH connections, aka Bu...

CVE-2013-1149

Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.28, 8.1 and 8.2 before 8.25.35, 8.3 before 8.32.34, 8.4 before 8.44.11, 8.6 before 8.61.10, and 8.7 before 8.71.3, and Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.224.1 and 4.0 a...

CVE-2013-1149

CVE-2013-1149 affects Cisco ASA and FWSM: remote attackers can cause a denial of service (device reload) by sending a crafted IKEv1 message. Affected software ranges include ASA 7.x up to 7.2(5.10), 8.0 up to 8.0(5.28), 8.1/8.2 up to 8.2(5.35), 8.3 up to 8.3(2.34), 8.4 up to 8.4(4.11), 8.6 up to ...

CVE-2013-1155

The auth-proxy functionality in Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.220.1, 4.0 before 4.015.2, and 4.1 before 4.15.1 allows remote attackers to cause a denial of service device reload via a crafted URL, aka Bug ID CSCtg02624...

CVE-2013-1155

The CVE-2013-1155 vulnerability affects Cisco Firewall Services Module (FWSM) software for Cisco Catalyst 6500 and Cisco 7600 series. The auth-proxy functionality in FWSM versions 3.1 and 3.2 prior to 3.2(20.1), 4.0 prior to 4.0(15.2), and 4.1 prior to 4.1(5.1) allows remote attackers to cause a ...

CVE-2013-1149

Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.28, 8.1 and 8.2 before 8.25.35, 8.3 before 8.32.34, 8.4 before 8.44.11, 8.6 before 8.61.10, and 8.7 before 8.71.3, and Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.224.1 and 4.0 a...

CVE-2013-1149: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.28, 8.1 and 8.2 before 8.25.35, 8.3 before 8.32.34, 8.4 before 8.44.11, 8.6 before 8.61.10, and 8.7 before 8.71.3, and Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.224.1 and 4.0 a...

Multiple Vulnerabilities in Cisco ASA Software

Cisco ASA Software is affected by the following vulnerabilities: IKE Version 1 Denial of Service Vulnerability Crafted URL Denial of Service Vulnerability Denial of Service During Validation of Crafted Certificates DNS Inspection Denial of Service Vulnerability These vulnerabilities are independe...

Cisco ASA 1000V Cloud Firewall H.323 Inspection Denial of Service Vulnerability

A vulnerability in Cisco Adaptive Security Appliance ASA Software for the Cisco ASA 1000V Cloud Firewall may cause the Cisco ASA 1000V to reload after processing a malformed H.323 message. Cisco ASA 1000V Cloud Firewall is affected when H.323 inspection is enabled. Cisco has released software...