EUVD-2016-10037

Malware in sbrugna...

CVE-2016-9225: Undefined Security Weakness

A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance ASA CX Context-Aware Security module could allow an unauthenticated, remote attacker to cause the CX module to be unable to process further traffic, resulting in a denial of service DoS condition. The...

CVE-2015-6344: Exposure of Sensitive Information to an Unauthorized Actor

The web-based GUI in Cisco Adaptive Security Appliance ASA CX Context-Aware Security 9.34.1.11 allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105...

PT-2015-7193

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA CX Context-Aware Security version 9.34.1.11 Description The issue allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP...

CVE-2013-5561: Improper Input Validation

The Safe Search enforcement feature in Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended policy restrictions via unspecified vectors, aka Bug ID CSCui94622...

CVE-2013-1203: Improper Input Validation

Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service device reload via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive Security Appliances ASA device, aka Bug ID CSCue88386...

CVE-2012-4629: Undefined Security Weakness

The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances ASA devices, and Prime Security Manager aka PRSM before 9.0.2-103, allows remote attackers to cause a denial of service disk consumption and application hang via unspecified IPv4 packets that trigger...