CVE-2016-6366

Buffer overflow in Cisco Adaptive Security Appliance ASA Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka...

CVE-2016-6366

Buffer overflow in Cisco Adaptive Security Appliance ASA Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka...

Cisco Adaptive Security Appliance Access Control List ICMP Echo Request Code Filtering Vulnerability

A vulnerability in the Cisco Adaptive Security Appliance ASA Software implementation of access control list ACL permit and deny filters for ICMP echo reply messages could allow an unauthenticated, remote attacker to bypass ACL configurations for an affected device. ICMP traffic that should be...

CVE-2016-1385

The XML parser in Cisco Adaptive Security Appliance ASA Software through 9.5.2 allows remote authenticated users to cause a denial of service instability, memory consumption, or device reload by leveraging 1 administrative access or 2 Clientless SSL VPN access to provide a crafted XML document, a...

Code injection

The XML parser in Cisco Adaptive Security Appliance ASA Software through 9.5.2 allows remote authenticated users to cause a denial of service instability, memory consumption, or device reload by leveraging 1 administrative access or 2 Clientless SSL VPN access to provide a crafted XML document, a...

Cisco ASA Software 8.x9.x - IKEv1 IKEv2 Buffer Overflow

Cisco ASA Software 8.x9.x - IKEv1 IKEv2 Buffer Overflow !/usr/bin/env python2.7 import socket import sys import struct import string import random import time Spawns a reverse cisco CLI cliShellcode = "\x60\xc7\x02\x90\x67\xb9\x09\x8b\x45\xf8\x8b\x40\x5c\x8b\x40\x04"...

CVE-2016-1367

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...

Design/Logic Flaw

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug ID CSCus23248...

Cisco WSA HTTPS Packet Processing Denial of Service Vulnerability

Cisco WSA Software is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Buffer overflow

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.47.30, 8.7 before 8.71.18, 9.0 before 9.04.38, 9.1 before 9.17, 9.2 before 9.24.5, 9.3 before 9.33.7, 9.4 before 9.42.4, and 9.5 before 9.52.2 on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cis...

CVE-2016-1287

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.47.30, 8.7 before 8.71.18, 9.0 before 9.04.38, 9.1 before 9.17, 9.2 before 9.24.5, 9.3 before 9.33.7, 9.4 before 9.42.4, and 9.5 before 9.52.2 on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cis...

CVE-2016-1287

CVE-2016-1287 is a Cisco ASA/IOS IKEv1/v2 buffer overflow affecting ASA on multiple platforms. The issue allows remote attackers to execute arbitrary code or cause a device reload via crafted UDP packets. Affected software versions include ASA 8.4(x) up to 8.4(7.30), 8.7 up to 8.7(1.18), and 9.x ...

CVE-2016-1295

CVE-2016-1295 affects Cisco ASA Software 8.4. An unauthenticated, remote attacker can disclose sensitive data during a Cisco AnyConnect client authentication attempt, including the ASA software version. The underlying issue is improper protection of sensitive data during the authentication proces...

CVE-2015-6423

Cisco ASA Software 9.4.1–9.5.1 is affected by CVE-2015-6423, a DCERPC Inspection bypass where the internal ACL incorrectly permits non-DCERPC traffic, enabling remote authenticated users to bypass the DCERPC-only ACL. The issue stems from the DCERPC Inspection feature allowing traffic beyond DCER...

Cisco Adaptive Security Appliance Software拒绝服务漏洞（CNVD-2015-07836）

No description provided by source...

CVE-2015-6379

The XML parser in the management interface in Cisco Adaptive Security Appliance ASA Software 8.4 allows remote authenticated users to cause a denial of service device crash via a crafted XML document, aka Bug ID CSCut14223...

Design/Logic Flaw

The XML parser in the management interface in Cisco Adaptive Security Appliance ASA Software 8.4 allows remote authenticated users to cause a denial of service device crash via a crafted XML document, aka Bug ID CSCut14223...

Cisco ASA Software DHCPv6 Relay DoS Vulnerability (cisco-sa-20150115-asa-dhcp)

Cisco ASA Software is prone to a denial of service DoS vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.106053. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Design/Logic Flaw

The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA software 9.0 before 9.04.37, 9.1 before 9.16.6, 9.2 before 9.24, 9.3 before 9.33.5, and 9.4 before 9.42 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug IDs CSCus56252 an...

Cisco ASA Software DHCPv6 Relay Denial of Service Vulnerability

A vulnerability in the DHCPv6 relay feature of Cisco Adaptive Security Appliance ASA software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of DHCPv6 packets. Cisco ASA Software is affected by this...