CVE-2013-1155

The auth-proxy functionality in Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.220.1, 4.0 before 4.015.2, and 4.1 before 4.15.1 allows remote attackers to cause a denial of service device reload via a crafted URL, aka Bug ID CSCtg02624...

CVE-2010-2821

Unspecified vulnerability on the Cisco Firewall Services Module FWSM with software 3.2 before 3.217.2, 4.0 before 4.011.1, and 4.1 before 4.11.2 for Catalyst 6500 series switches and 7600 series routers, when multi-mode is enabled, allows remote attackers to cause a denial of service device reloa...

CVE-2010-2820

Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module FWSM with software 3.1 before 3.117.2, 3.2 before 3.216.1, 4.0 before 4.010.1, and 4.1 before 4.11.1 for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial...

CVE-2010-2818

Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module FWSM with software 3.1 before 3.117.2, 3.2 before 3.216.1, 4.0 before 4.010.1, and 4.1 before 4.11.1 for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial...

CVE-2003-1002

Cisco Firewall Services Module FWSM in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service crash and reload via an SNMPv3 message when snmp-server is set...

CVE-2003-1001

Buffer overflow in the Cisco Firewall Services Module FWSM in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service crash and reload via HTTP auth requests for 1 TACACS+ or 2 RADIUS authentication...

Cisco ASA and FWSM Security Advisories

Overview On October 9, 2013, Cisco released two security advisorieshttp://www.us-cert.gov/ncas/current-activity/2013/10/10/Cisco-Releases-Security-Advisories concerning multiple vulnerabilities within software for the following components: Cisco Adaptive Security Appliance ASA...

Cisco UCS Director Software Has Default Credentials Open to Attackers

Cisco’s UCS Director infrastructure management product contains a set of default credentials that any remote attacker can exploit to take complete control of any vulnerable machine. The flaw is in UCS Director versions 4.0.0.2 and below. The Cisco UCS Director software is designed to allow...

CVE-2013-5508

The SQLNet inspection engine in Cisco Adaptive Security Appliance ASA Software 7.x before 7.25.12, 8.x before 8.25.44, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.5.x before 8.51.18, 8.6.x before 8.61.12, 8.7.x before 8.71.6, 9.0.x before 9.02.10, and 9.1.x before 9.12 and Firewall Services Module...

Multiple Vulnerabilities in Cisco Firewall Services Module Software

Cisco Firewall Services Module FWSM Software for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers is affected by the following vulnerabilities: Cisco FWSM Command Authorization Vulnerability SQLNet Inspection Engine Denial of Service Vulnerability These vulnerabilities are...

Multiple Vulnerabilities in Cisco Firewall Services Module Software (cisco-sa-20130410-fwsm)

The remote Cisco Firewall Services Module FWSM for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers may be affected by the following vulnerabilities : - A flaw in the FWSM software could allow remote attackers to cause a denial of service DoS condition via a crafted IKEv1 message...

PT-2013-2962 · Cisco · Cisco Firewall Services Module +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices affected versions not specified Cisco Firewall Services Module FWSM affected versions not specified Description: The issue concerns the time-based ACL implementation, which does not properly hand...

Code injection

The Secure Shell SSH implementation on Cisco Adaptive Security Appliances ASA devices, and in Cisco Firewall Services Module FWSM, does not properly terminate sessions, which allows remote attackers to cause a denial of service SSH service outage by repeatedly establishing SSH connections, aka Bu...

CVE-2013-1193

The Secure Shell SSH implementation on Cisco Adaptive Security Appliances ASA devices, and in Cisco Firewall Services Module FWSM, does not properly terminate sessions, which allows remote attackers to cause a denial of service SSH service outage by repeatedly establishing SSH connections, aka Bu...

PT-2013-2960 · Cisco · Cisco Firewall Services Module +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices affected versions not specified Cisco Firewall Services Module FWSM affected versions not specified Description: The Secure Shell SSH implementation does not properly terminate sessions, allowing...

CVE-2013-1155

The auth-proxy functionality in Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.220.1, 4.0 before 4.015.2, and 4.1 before 4.15.1 allows remote attackers to cause a denial of service device reload via a crafted URL, aka Bug ID CSCtg02624...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.28, 8.1 and 8.2 before 8.25.35, 8.3 before 8.32.34, 8.4 before 8.44.11, 8.6 before 8.61.10, and 8.7 before 8.71.3, and Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.224.1 and 4.0 a...

Code injection

The auth-proxy functionality in Cisco Firewall Services Module FWSM software 3.1 and 3.2 before 3.220.1, 4.0 before 4.015.2, and 4.1 before 4.15.1 allows remote attackers to cause a denial of service device reload via a crafted URL, aka Bug ID CSCtg02624...

PT-2013-2917 · Cisco · Cisco Firewall Services Module +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices versions 7.x through 7.25.9 Cisco Adaptive Security Appliances ASA devices versions 8.0 through 8.05.27 Cisco Adaptive Security Appliances ASA devices versions 8.1 through 8.25.34 Cisco Adaptive...

Code injection

The DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.13 and the Firewall Services Module FWSM 4.1 before 4.17 in...