PT-2016-6898 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.4.7.29 through 9.1.7.4 Description: A denial of service issue exists due to the improper handling of DHCP packets by the DHCP Relay feature. This can be exploited by an unauthenticated...

VulnCheck KEV: CVE-2014-3393

The Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.6 before 8.61.14, 9.0 before 9.04.24, 9.1 before 9.15.12, and 9.2 before 9.22.4 does not properly implement authentication, which allows remote...

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor, who operates remotely and has completed the authentication process, to trigger a service failure device reboot or execute...

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor, who operates locally and has completed the authentication process, to cause service failures or execute arbitrary code by enteri...

Cisco Adaptive Security Appliance Software Remote Code Execution Vulnerability

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. A remote code execution vulnerability exists in the SNMP code of the Cisco Adaptive Security Appliance ASA Software. A remote...

CVE-2016-1457

The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance ASA Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 allows remote authenticated users to execute...

Code injection

The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance ASA Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before...

CVE-2016-6366

Buffer overflow in Cisco Adaptive Security Appliance ASA Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka...

PT-2016-4806 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center versions 4.x through 5.3.0.2, 5.3.1.x through 5.3.1.1, and 5.4.x through 5.4.0.0 Cisco Adaptive Security Appliance ASA Software on 5500-X devices with FirePOWER Services versions 4.x through 5.3.0.2, 5.3.1.x...

PT-2016-4805 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center versions 4.x through 5.3.1.1 and versions 5.4.x before 5.4.0.1 Cisco Adaptive Security Appliance ASA Software on 5500-X devices with FirePOWER Services versions 4.x through 5.3.1.1 and versions 5.4.x before...

Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability (cisco-sa-20160817-asa-snmp)

A vulnerability in the Simple Network Management Protocol SNMP code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. Copyright C 2016 Greenbone Networks GmbH Some text descriptio...

PT-2016-2534 · Cisco · Cisco Asa +8

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions through 9.4.2.3 Description: The issue is caused by a buffer overflow in the Simple Network Management Protocol SNMP code, allowing remote authenticated users to execute arbitrary code v...

Cisco Adaptive Security Appliance ICMP Echo Request ACL Bypass (cisco-sa-20160711-asa)

According to its version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is version 8.2.x or 9.4.x prior to 9.43.3, 9.5.x prior to 9.52.10, or 9.6.x prior to 9.61.5. It is, therefore, affected by an ACL bypass vulnerability due to a flaw in the...

Cisco Adaptive Security Appliance Access Control List ICMP Echo Request Code Filtering Vulnerability (cisco-sa-20160711-asa)

A vulnerability in the Cisco Adaptive Security Appliance ASA Software implementation of access control list ACL permit and deny filters for ICMP Echo Reply messages could allow an unauthenticated, remote attacker to bypass ACL configurations for an affected device. ICMP traffic that should be...

CVE-2016-1445

Cisco Adaptive Security Appliance ASA Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Echo Reply ACLs via vectors related to subtypes...

Cisco Adaptive Security Appliances Software Security Bypass Vulnerability

Cisco Adaptive Security Appliances ASA, Adaptive Security Appliances Software is a set of firewall appliances from Cisco USA. The device also includes IPS Intrusion Prevention System, SSL VPN, IPSec VPN, anti-spam and other features. A security bypass vulnerability exists in Cisco ASA Software...

PT-2016-4793 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 through 9.4.3.3 Description: A bypass issue in the implementation of access control list ACL permit and deny filters for ICMP echo reply messages could allow an unauthenticated, remo...

Cisco ASA AnyConnect Client Authentication Attempt Handling Information Disclosure (cisco-sa-20160115-asa)

According to its version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by an information disclosure vulnerability due to a failure to protect sensitive data during a Cisco AnyConnect client authentication attempt. An unauthenticated...

Cisco ASA AnyConnect Client Authentication Attempt Handling Information Disclosure (cisco-sa-20160115-asa)

According to its version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by an information disclosure vulnerability due to a failure to protect sensitive data during a Cisco AnyConnect client authentication attempt. An unauthenticated...

Cisco Adaptive Security Appliance XML Parser DoS (cisco-sa-20160517-asa-xml)

The Cisco Adaptive Security Appliance ASA Software running on the remote device is affected by a denial of service vulnerability in the XML parser feature due to improper hardening of the XML parser configuration. An authenticated, remote attacker can exploit this, via a specially crafted XML fil...