CVE-2013-1151: Improper Input Validation

Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.31, 8.1 and 8.2 before 8.25.38, 8.3 before 8.32.37, 8.4 before 8.45, 8.5 before 8.51.17, 8.6 before 8.61.10, and 8.7 before 8.71.3 allow remote attackers to cause a denial of service device reload via...

CVE-2013-1150: Improper Authentication

The authentication-proxy implementation on Cisco Adaptive Security Appliances ASA devices with software 7.x before 7.25.10, 8.0 before 8.05.31, 8.1 and 8.2 before 8.25.38, 8.3 before 8.32.37, 8.4 before 8.45.3, 8.5 and 8.6 before 8.61.10, 8.7 before 8.71.4, 9.0 before 9.01.1, and 9.1 before 9.11....

PT-2013-2919 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices with software versions prior to 7.25.10 Cisco Adaptive Security Appliances ASA devices with software versions 8.0 prior to 8.05.31 Cisco Adaptive Security Appliances ASA devices with software...

PT-2013-2917 · Cisco · Cisco Firewall Services Module +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices versions 7.x through 7.25.9 Cisco Adaptive Security Appliances ASA devices versions 8.0 through 8.05.27 Cisco Adaptive Security Appliances ASA devices versions 8.1 through 8.25.34 Cisco Adaptive...

Cisco Adaptive Security Appliance Xlates Table Exhaustion Vulnerability

Cisco Adaptive Security Appliance ASA Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to the improper implementation of the Network Address Translation NAT process by the affected software...

CVE-2013-1138

CVE-2013-1138 concerns Cisco ASA devices where the NAT process can be abused by unauthenticated, remote attackers sending crafted packets to exhaust the connections-table memory, causing a DoS. The vulnerability (Bug ID CSCue46386) affects Cisco ASA software and is described as a NAT handling fla...

CVE-2013-1138: Improper Restriction of Operations within the Bounds of a Memory Buffer

The NAT process on Cisco Adaptive Security Appliances ASA devices allows remote attackers to cause a denial of service connections-table memory consumption via crafted packets, aka Bug ID CSCue46386...

CVE-2012-6395: Improper Input Validation

Cisco Adaptive Security Appliances ASA devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service device crash via unknown vectors, aka Bug ID CSCuc65775...

Cisco ASA 1000V Cloud Firewall H.323 Inspection Denial of Service Vulnerability

A vulnerability in Cisco Adaptive Security Appliance ASA Software for the Cisco ASA 1000V Cloud Firewall may cause the Cisco ASA 1000V to reload after processing a malformed H.323 message. Cisco ASA 1000V Cloud Firewall is affected when H.323 inspection is enabled. Cisco has released software...

CVE-2012-4643

The DHCP server on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 7.0 before 7.25.8, 7.1 before 7.25.8, 7.2 before 7.25.8, 8.0 before 8.05.28, 8.1 before 8.12.56, 8.2 before 8.25.27, 8.3 before...

Authentication flaw

The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.30 and 8.3 before 8.32.34 allows remote attackers to cause a denial of...

CVE-2012-4662: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DCERPC inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.3 before 8.32.25, 8.4 before 8.42.5, and 8.5 before 8.51.13 and the Firewall Services Module FWSM 4.1 before 4.17 in...

CVE-2012-4660: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SIP inspection engine on Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.2 before 8.25.17, 8.3 before 8.32.28, 8.4 before 8.42.13, 8.5 before 8.51.4, and 8.6 before 8.61.5 allows remote...

PT-2012-5530 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 through 8.25.16 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 through 8.32.27 Cisco Adaptive Security Appliances ASA 5500 series devices version...

PT-2012-5527 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices versions 7.0 through 7.25.7 Cisco Adaptive Security Appliances ASA 5500 series devices and the ASA Services...

PT-2012-5532 · Cisco · Cisco Asa Services Module +3

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 before 8.32.25 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 before 8.42.5 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8...

CVE-2012-4629: Undefined Security Weakness

The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances ASA devices, and Prime Security Manager aka PRSM before 9.0.2-103, allows remote attackers to cause a denial of service disk consumption and application hang via unspecified IPv4 packets that trigger...

PT-2012-4058 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.2 through 8.4 Description: The issue allows remote attackers to cause a denial of service via crafted SIP traffic when SIP inspection is enabled. This is due to the creatio...

CVE-2012-2474: Exposure of Sensitive Information to an Unauthorized Actor

Memory leak on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service memory consumption and blank response page by using the clientless WebVPN feature, aka Bug ID CSCth34278...

Code injection

Cisco Adaptive Security Appliances ASA 5500 series devices, and the ASA Services Module ASASM in Cisco Catalyst 6500 series devices, with software 8.4 before 8.44.1, 8.5 before 8.51.11, and 8.6 before 8.61.3 allow remote attackers to cause a denial of service device reload via IPv6 transit traffi...