Lucene search
+L

21 matches found

BDU FSTEC
BDU FSTEC
•added 2025/06/20 12:00 a.m.•21 views

The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z teleworkers allows a hacker to cause a service outage.

The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z teleworkers relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending...

8.6CVSS5.7AI score0.00505EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/06/20 12:00 a.m.•21 views

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki ZTeleworker Gateway network devices allows a perpetrator to trigger a device reboot or cause a service failure.

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z teleworker gateway devices is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to trigger a device reboot or cause a service failure...

7.8CVSS5.5AI score0.00553EPSS
SaveExploits0References3Affected Software1
NCSC
NCSC
•added 2025/06/19 8:42 a.m.•15 views

Vulnerability fixed in Cisco AnyConnect VPN for Meraki MX and Z

Cisco has fixed a vulnerability in the Cisco AnyConnect VPN server on Cisco Meraki MX and Z Series devices. The vulnerability is in how the Cisco AnyConnect VPN server initializes variables during the establishment of SSL VPN sessions. Unauthenticated remote attackers can exploit this...

8.6CVSS6.9AI score0.00538EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/18 12:00 a.m.•4 views

CVE-2025-20271: Use of Uninitialized Variable

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the Cisco AnyConnect service on an affected device. This vulnerability is due...

8.6CVSS5.8AI score0.00538EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/18 12:00 a.m.•24 views

PT-2025-26180 · Cisco · Cisco Meraki Z Series +2

Name of the Vulnerable Software and Affected Versions: Cisco Meraki MX Firmware affected versions not specified Cisco Meraki Z Series Teleworker Gateway devices affected versions not specified Description: A vulnerability in the Cisco AnyConnect VPN server could allow an unauthenticated, remote...

8.6CVSS6.6AI score0.00538EPSS
SaveExploits0References22
CNNVD
CNNVD
•added 2025/06/18 12:00 a.m.•14 views

Cisco Meraki Z和Cisco Meraki MX 安全漏洞

The Cisco Meraki Z and Cisco Meraki MX are both products of Cisco, Inc.The Cisco Meraki Z is an enterprise-class firewall, VPN gateway, and router.The Cisco Meraki MX is a multifunction security and SD-WAN enterprise appliance. A security vulnerability exists in Cisco Meraki Z and Cisco Meraki MX...

8.6CVSS6.4AI score0.00538EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/05/28 12:00 a.m.•28 views

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway network devices allows a perpetrator to cause service interruptions.

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway network devices is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.7CVSS8AI score0.00694EPSS
SaveExploits0References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/02 12:00 a.m.•4 views

CVE-2025-20212: Use of Uninitialized Variable

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series devices could allow an authenticated, remote attacker to cause a denial of service DoS condition in the Cisco AnyConnect service on an affected device. To exploit this vulnerability, the attacker must...

7.7CVSS7.6AI score0.00694EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/02 12:00 a.m.•16 views

Cisco Meraki Z和Cisco Meraki MX 安全漏洞

Cisco Meraki Z and Cisco Meraki MX are both products of Cisco, Inc.Cisco Meraki Z is an enterprise-class firewall, VPN gateway, and router.Cisco Meraki MX is a multifunction security and SD-WAN enterprise appliance. A security vulnerability exists in Cisco Meraki Z and Cisco Meraki MX that stems...

7.7CVSS9AI score0.00694EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/02 12:00 a.m.•16 views

PT-2025-14532 · Cisco · Cisco Meraki Z Series +2

Name of the Vulnerable Software and Affected Versions: Cisco Meraki MX and Cisco Meraki Z Series devices versions MX64, MX64W, MX65, MX65W, MX67, MX67C, MX67W, MX68, MX68CW Description: A vulnerability in the Cisco AnyConnect VPN server could allow an authenticated, remote attacker to cause a...

7.7CVSS9.1AI score0.00694EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
•added 2025/03/23 12:00 a.m.•13 views

The vulnerability of the Cisco AnyConnect VPN server’s microprogramming software in Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateways allows a intruder to trigger a service failure.

The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateways is related to a reallocation of memory. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially...

8.6CVSS5.4AI score0.00505EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•2 views

CVE-2024-20501: Out-of-bounds Write

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities are due to insufficie...

8.6CVSS7.8AI score0.00505EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•4 views

CVE-2024-20513: Authorization Bypass Through User-Controlled Key

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected device. This vulnerability is due to...

5.8CVSS5.9AI score0.00452EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/02 12:00 a.m.•16 views

Cisco Meraki Z和Cisco Meraki MX 缓冲区错误漏洞

The Cisco Meraki Z and Cisco Meraki MX are both products of Cisco, Inc.The Cisco Meraki Z is an enterprise-class firewall, VPN gateway, and router.The Cisco Meraki MX is a multifunction security and SD-WAN enterprise appliance. A buffer error vulnerability exists in the Cisco Meraki Z and Cisco...

8.6CVSS7.1AI score0.00505EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/10/02 12:00 a.m.•26 views

PT-2024-18668 · Cisco · Cisco Meraki Z Series Teleworker Gateway +2

Name of the Vulnerable Software and Affected Versions: Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices affected versions not specified Description: A vulnerability in the Cisco AnyConnect VPN server could allow an unauthenticated, remote attacker to cause a DoS condition in t...

7.8CVSS7AI score0.00553EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•4 views

CVE-2024-20509: Concurrent Execution using Shared Resource with Improper Synchronization

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service DoS condition for individual users of the AnyConnect VPN...

5.9CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•3 views

CVE-2024-20502: Uncontrolled Resource Consumption

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to insufficient resource management while establishi...

7.5CVSS7.2AI score0.0052EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•2 views

CVE-2024-20498: Double Free

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities are due to insufficie...

8.6CVSS7.8AI score0.00505EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/02 12:00 a.m.•17 views

Cisco Meraki Z和Cisco Meraki MX 资源管理错误漏洞

The Cisco Meraki Z and Cisco Meraki MX are both products of Cisco, Inc.The Cisco Meraki Z is an enterprise-class firewall, VPN gateway, and router.The Cisco Meraki MX is a multifunction security and SD-WAN enterprise appliance. A resource management error vulnerability exists in the Cisco Meraki ...

8.6CVSS6.9AI score0.00505EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•2 views

CVE-2024-20500: Uncontrolled Resource Consumption

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vulnerability is due to insufficient resource...

7.5CVSS7.2AI score0.00553EPSS
SaveExploits0References1
Rows per page
Query Builder