Design/Logic Flaw

A vulnerability in the detection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to send data directly to the kernel of an affected device. The vulnerability exists because the software...

CVE-2019-1687

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

Race condition

A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing...

Race condition

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability i...

CVE-2019-1697 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial ...

CVE-2019-1697

CVE-2019-1697 describes a denial-of-service vulnerability in Cisco ASA/FTD LDAP handling. An unauthenticated remote attacker can send crafted LDAP BER packets that are parsed by the device, causing it to reload. Root cause: improper parsing of LDAP packets. Affected: Cisco ASA Software and Firepo...

CVE-2019-1694

CVE-2019-1694 affects Cisco ASA/FTD TCP processing engine. The issue arises from improper handling of TCP traffic, where sending a specific sequence of packets at a high rate can cause the device to reboot, temporarily disrupting traffic (DoS). Affected products include ASA/FTD software; exploita...

CVE-2019-1695

The CVE-2019-1695 issue affects Cisco ASA and Cisco FTD, where the detection engine improperly filters Ethernet frames, allowing an unauthenticated, adjacent attacker to bypass Layer 2 filters and send data directly to the kernel via crafted packets to the management interface. This can trigger a...

CVE-2019-1695 Cisco Adaptive Security Appliance and Firepower Threat Defense Software Layer 2 Filtering Bypass Vulnerability

A vulnerability in the detection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to send data directly to the kernel of an affected device. The vulnerability exists because the software...

CVE-2019-1696

Cisco Firepower Threat Defense (FTD) software is affected by CVE-2019-1696 through multiple DoS vulnerabilities in the SMB Protocol preprocessor detection engine. An unauthenticated, adjacent or remote attacker could cause a denial of service. Affected products are FTD with SMB preprocessor detec...

CVE-2019-1693

The CVE-2019-1693 issue affects Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software, specifically the WebVPN portal. The root cause is improper management of authenticated WebVPN sessions, which can be exploited by an attacker with valid credentials ...

CVE-2019-1693 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability

A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper management o...

CVE-2019-1687 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

CVE-2019-1687

CVE-2019-1687 describes a DoS vulnerability in Cisco ASA/FTD TCP proxy handling. The issue is due to an error in TCP-based packet inspection that can cause a crafted TCP sequence to produce an invalid Layer 2 header, potentially causing the device to restart. The affected products are Cisco Adapt...

CVE-2018-15462

CVE-2018-15462 affects Cisco Firepower Threat Defense (FTD) Software. The issue is in the TCP ingress handler for data interfaces configured with management access, caused by insufficient ingress TCP rate limiting. An unauthenticated, remote attacker can send a steady stream of TCP traffic to por...

CVE-2018-15388 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability

A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing...

CVE-2018-15388 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability

A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing...

CVE-2018-15388

The CVE-2018-15388 issue affects Cisco ASA and Cisco FTD WebVPN login functionality. Root cause: excessive processing load for existing WebVPN login operations leads to unauthenticated remote attackers sending multiple login requests, increasing CPU usage and causing a DoS. Documented impact: ele...

CVE-2019-1696: Uncontrolled Resource Consumption

Multiple vulnerabilities in the Server Message Block SMB Protocol preprocessor detection engine for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service DoS condition. For more information about these vulnerabilities,...

CVE-2019-1694: Improper Input Validation

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability i...