Multiple Cisco Products CVE-2019-15992 Remote Code Execution Vulnerability

Description Multiple Cisco Products are prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the application. This issue is being tracked by Cisco Bug IDs CSCvr85295 and CSCvr96680 . Technologies...

PT-2019-3973 · Cisco +1 · Cisco Ftd +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the implementation of the Lua interpreter integrated in...

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Digital Error Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Resource Management Error Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Adaptive Security Software and Cisco Firepower Threat Defense Buffer Overflow Vulnerabilities

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

The vulnerability of the Secure Copy function in Cisco Adaptive Security Appliance (ASA) microprogramming software allows a perpetrator to trigger a service failure.

The vulnerability of the Secure Copy function in Cisco Adaptive Security Appliance ASA microprogramming software is related to type determination errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco Adaptive Security Appliance Software SIP Inspection DoS (cisco-sa-20191002-asa-ftd-sip-dos)

A denial of service DoS vulnerability exists in the Session Initiation Protocol SIP inspection module of Cisco Adaptive Security Appliance ASA due to improper parsing of SIP messages. An unauthenticated, remote attacker can exploit this issue by sending a malicious SIP packet to an affected devic...

The vulnerability of the implementation of the Virtual Private Network (VPN) technology based on Secure Sockets Layer (SSL) and Transport Layer Security (TLS protocols, provided by the Cisco Adaptive Security Appliance – ASA) allows a perpetrator to cause service interruptions.

The vulnerability of the VPN technology based on Secure Sockets Layer SSL and Transport Layer Security TLS implemented by Cisco Adaptive Security Appliance ASA is related to errors in string processing in the Base64 encoding format. Exploiting this vulnerability can allow an attacker to cause a...

Cisco Adaptive Security Appliance Software Secure Copy DoS (cisco-sa-20191002-asa-scp-dos)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a denial of service DoS vulnerability. This vulnerability exists in the Secure Copy SCP feature due to the use of an incorrect data type for a length variable. An authenticated, remote attacker c...

Cisco Adaptive Security Appliance WebVPN XSS (cisco-sa-20191002-asa-xss)

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Adaptive Security Appliance ASA allows an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

The vulnerability of the FTP analysis mechanism of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense (FTD) allows attackers to induce service interruptions.

The vulnerability of the FTP analysis mechanism of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense FTD is related to the execution of operations outside the buffer in memory. Exploitation of this vulnerability can allow a malicious actor to cause service interruptions using...

The vulnerability of the Internet Key Exchange Version 1 function in Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense (FTD) software allows a attacker to induce a service failure.

The vulnerability of the Internet Key Exchange Version 1 IKEv1 function in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense FTD is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to induce service failure through specially...

The vulnerability of the SIP protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failure.

The vulnerability of the SIP protocol implementation in Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense FTD is related to errors in processing SIP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2019-12695

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an...

CVE-2019-12677

A vulnerability in the Secure Sockets Layer SSL VPN feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a denial of service DoS condition that prevents the creation of new SSL/Transport Layer Security TLS connections to an affected...

CVE-2019-12673

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

CVE-2019-12676

A vulnerability in the Open Shortest Path First OSPF implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS...

Input validation

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

CVE-2019-12698 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CPU Denial of Service Vulnerability

A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing load f...

CVE-2019-12695 Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerability

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an...