CVE-2017-6609

CVE-2017-6609 affects Cisco ASA Software IPsec handling. The vulnerability stems from improper parsing of malformed IPsec packets in the IPsec code, requiring an authenticated, remote attacker to establish a valid IPsec tunnel and send crafted traffic to the affected system. Exploitation can caus...

CVE-2017-6607

The CVE-2017-6607 issue affects Cisco ASA Software DNS handling. A crafted DNS response can be used by an unauthenticated remote attacker to cause the device to reload or corrupt its local DNS cache, leading to DoS or cache corruption. Impact applies to ASA in routed or transparent firewall mode,...

CVE-2017-6609

A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets. An attacker could exploit this vulnerability by sending malformed IPsec packets ...

PT-2017-16098 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.0 through 8.7 Cisco Adaptive Security Appliance ASA Software versions 9.0 through 9.6 Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A...

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software allows a perpetrator to bypass the access control list configuration.

The vulnerabilities of the Border Gateway Protocol BGP and Bidirectional Forwarding Detection BFD components of the Cisco Adaptive Security Appliance software-related networking devices are related to deficiencies in access control for certain functions. Exploiting these vulnerabilities can allow...

Cisco Adaptive Security Appliances Software Security Bypass Vulnerability

Cisco Adaptive Security Appliances ASA, Adaptive Security Appliances Software is a set of operating systems running in firewalls from the U.S. company Cisco Cisco. A security vulnerability exists in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation in Cisco ASA...

CVE-2017-3867

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. More Information:...

CVE-2017-3867

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. More Information:...

Cisco Adaptive Security Appliance BGP Bidirectional Forwarding Detection ACL Bypass Vulnerability (cisco-sa-20170315-asa)

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. Copyright C 2017...

Cisco Adaptive Security Appliance CX Context-Aware Security Denial of Service Vulnerability

Cisco Adaptive Security Appliance ASA CX Context-Aware Security is an add-on service module for extending the ASA platform from Cisco USA. A security vulnerability exists in the data plane IP fragment handler in the Cisco ASA CX Context-Aware Security module, which arises from the program's failu...

Cisco Releases Security Updates

Cisco has released several updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply th...

Cisco ASA Web Interface Remote XML Command Injection (cisco-sa-20161116-asa)

According to its self-reported version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by an XML command injection vulnerability in the web-based management interface due to improper validation of user-supplied input. An...

CVE-2016-9209

A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that would normally be blocked. Affected Products: The following Cisco products are vulnerable: Adaptive Security Appliance ASA 5500-X Series with FirePOWER...

CVE-2016-6461

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.16.10. Known Fixed Releases:...

CVE-2016-6461

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.16.10. Known Fixed Releases:...

Cisco Adaptive Security Appliance Command Injection Vulnerability

Cisco Adaptive Security Appliance ASA is a set of firewall appliances from the American company Cisco Cisco. The appliance also includes IPS Intrusion Prevention System, SSL VPN, IPSec VPN, anti-spam and other features. The Cisco ASA suffers from a command injection vulnerability due to the progr...

Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2016-09468)

Cisco Adaptive Security Appliance Software is a modular platform that provides security and VPN services from Cisco. A denial of service vulnerability exists in Cisco Adaptive Security Appliance Software versions 8.4.7.29 and 9.1.7.4, which could allow a remote attacker to cause a denial of servi...

CVE-2016-6424

The DHCP Relay implementation in Cisco Adaptive Security Appliance ASA Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of service interface wedge via a crafted rate of DHCP packet transmission, aka Bug ID CSCuy66942...

CVE-2016-6424

The DHCP Relay implementation in Cisco Adaptive Security Appliance ASA Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of service interface wedge via a crafted rate of DHCP packet transmission, aka Bug ID CSCuy66942...

Cisco Host Scan Package Cross-Site Scripting Vulnerability

A vulnerability in the Cisco Host Scan package could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of a Cisco Adaptive Security Appliance ASA Web VPN deployment. The vulnerability is due to insufficient input validation of a user-supplied...