CVE-2020-3452 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability i...

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability i...

How CARTA Strategies for Web Applications are Met with Indusface AppTrana Solution

Gartner’s CARTA Continuous Adaptive Risk and Trust Assessment, which sets out their vision for security, is increasingly being adopted by several enterprises. Recently Gartner also called out CARTA strategic approach in the top 10 security projects for 2019. CARTA, being a strategic approach,...

Cisco Adaptive Security Appliance Software VPN Denial of Service (cisco-sa-20190501-asa-vpn-dos)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by following vulnerability - A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance ASA Software could allow a unauthenticated, remote attacker to cause a deni...

Is 97% Network Traffic Offload Interesting?

Sports, gaming, and other live events have the potential to overwhelm network capacity due to the sheer volume of traffic generated when large numbers of viewers or gamers engage. These "peak" events may only occur once a month or even once a year sports championships, election results, gaming...

Xiamen Service Cloud Information Technology Co., Ltd. cloud eye SQL injection vulnerabilities exist

CloudEye is a new generation cloud host intrusion monitoring and security management system built using a combination of advanced Endpoint Detection and Response EDR technology model and the conceptual idea of adaptive security architecture to solve security and management problems encountered in...

Cisco Adaptive Security Appliance Software OSPF LSA Packets Processing DoS (cisco-sa-20191002-asa-ospf-lsa-dos)

According to its self-reported version, Adaptive Security Appliance ASA Software is affected by a vulnerability in the Open Shortest Path First OSPF implementation due to incorrect processing of certain OSPF packets. An unauthenticated, adjacent attacker can exploit this by sending a series of...

Cisco Adaptive Security Appliance Software Web Services Information Disclosure (cisco-sa-asaftd-info-disclose-9eJtycMB)

A vulnerability exists in the web services interface of Cisco Adaptive Security Appliance ASA Software due to the handling of parsing of invalid URLs. An unauthenticated, remote attacker can exploit this, by sending a crafted GET request to the web services interface, in order to retrieve memory...

Cisco Adaptive Security Appliance (ASA) IPV6 DNS DoS (cisco-sa-asaftd-ipv6-67pA658k)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a denial of service DoS vulnerability in its DNS over IPV6 implementation due to insufficient user input validation. An unauthenticated, remote attacker can exploit this issue, by sending a...

Cisco Adaptive Security Appliance Software OSPF Packets Processing Memory Leak (cisco-sa-asa-ftd-ospf-memleak-DHpsgfnv)

According to its self-reported version, Adaptive Security Appliance ASA Software is affected by a vulnerability in the Open Shortest Path First OSPF implementation due to incorrect processing of certain OSPF packets. An unauthenticated, remote attacker can exploit this, by sending a series of...

Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass (cisco-asa-kerberos-bypass-96Gghe2sS)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability in the Kerberos authentication feature due to insufficient identity verification of the Kerberos key distribution center KDC when a successful authentication response is received...

How to Verify Adaptive Acceleration Features are Working on Browser

As we know, Adaptive Acceleration's umbrella consists of the below features: 1. Automatic Push/Preconnect 2. Resource Optimizer 3. Automatic Font Preload 4. Script Management To read more about these features, please refer to Akamai Community. Now let's see how we can validate if these features a...

Cisco Adaptive Security Appliance Layer 2 Filtering Bypass (cisco-sa-20190501-asa-ftd-bypass)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability in the detection engine due to improper filtering of Ethernet frames. An unauthenticated, adjacent attacker can exploit this, by sending crafted packets to the management interfac...

Cisco Adaptive Security Appliance Software DoS (cisco-sa-asaftd-mgcp-SUqB8VKH)

A denial of service DoS vulnerability exists in Cisco Adaptive Security Appliance ASA due to inefficient memory management in its Media Gateway Control Protocol MGCP inspection component. An unauthenticated, remote attacker can exploit this issue, by sending specially crafted packets to an affect...

The vulnerability of the DHCP module of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software allows a attacker to induce a service failure.

The vulnerability of the DHCP module of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software-related microprogramming systems is related to errors in processing certain DHCP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software, related to uncontrolled resource consumption, allows attackers to cause service interruptions.

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures due to incorrect processing of ARP packets...

Cisco Adaptive Security Appliance (ASA) WebVPN DoS (cisco-sa-20190501-sd-cpu-dos)

According to its self-reported version, the Cisco Adaptive Security Appliance ASA software installed on the remote host is affected by a vulnerability in the WebVPN login process that allows an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The...

Cisco Adaptive Security Appliance Software Web Services Path Traversal (cisco-sa-asaftd-path-JE3azWw43)

A vulnerability exists in the web services interface of Cisco Adaptive Security Appliance ASA Software due to a lack of proper input validation of the HTTP URL. An unauthenticated, remote attacker can exploit this, by sending a crafted HTTP request containing directory traversal character...

Cisco Adaptive Security Appliance Software SSL/TLS DoS (cisco-sa-asa-ssl-vpn-dos-qY7BHpjN)

A vulnerability exists in the Secure Sockets Layer SSL/Transport Layer Security TLS handler of Cisco Adaptive Security Appliance ASA Software due to improper resource management for inbound SSL/TLS connections. An unauthenticated, remote attacker can exploit this, by establishing multiple SSL/TLS...

Cisco Adaptive Security Appliance (ASA) BGP DoS (cisco-sa-asa-dos-P43GCE5j)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability in the implementation of the Border Gateway Protocol BGP module due to incorrect processing of certain BGP packets. An unauthenticated, remote attacker can exploit this, by sendin...