Lucene search
+L

24 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/18 12:00 a.m.•5 views

CVE-2025-20271: Use of Uninitialized Variable

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the Cisco AnyConnect service on an affected device. This vulnerability is due...

8.6CVSS5.8AI score0.00538EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/03/31 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-20933

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of...

8.6CVSS7.6AI score0.01051EPSS
SaveIn wildExploits0References2
NVD
NVD
•added 2024/10/02 7:15 p.m.•48 views

CVE-2024-20499

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities are due to insufficie...

8.6CVSS0.00505EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/02 7:15 p.m.•43 views

CVE-2024-20509

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service DoS condition for individual users of the AnyConnect VPN...

5.9CVSS0.00386EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/02 6:24 p.m.•87 views

CVE-2024-20509

CVE-2024-20509 affects Cisco Meraki MX and Z Series Teleworker Gateway devices running Cisco AnyConnect VPN server. The issue arises from weak entropy in VPN authentication handlers and a race condition in the same process, enabling an unauthenticated, remote attacker to hijack an AnyConnect VPN ...

5.9CVSS6AI score0.00386EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/02 6:24 p.m.•20 views

CVE-2024-20509

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service DoS condition for individual users of the AnyConnect VPN...

5.8CVSS6AI score0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/02 6:23 p.m.•17 views

CVE-2024-20513

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected device. This vulnerability is due to...

5.8CVSS5.6AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/02 6:23 p.m.•77 views

CVE-2024-20499

CVE-2024-20499 describes multiple DoS vulnerabilities in the Cisco AnyConnect VPN server used by Cisco Meraki MX and Z Series Teleworker Gateway devices. The flaws arise from insufficient validation of client-supplied parameters during SSL VPN session establishment, or from inadequate resource ma...

8.6CVSS8.2AI score0.00505EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/02 6:23 p.m.•16 views

CVE-2024-20500

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vulnerability is due to insufficient resource...

5.8CVSS6.5AI score0.00553EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/02 6:23 p.m.•87 views

CVE-2024-20498

CVE-2024-20498 describes multiple DoS vulnerabilities in the Cisco AnyConnect VPN server used by Cisco Meraki MX and Z Series Teleworker Gateway devices. The flaws arise from insufficient validation/resource management while establishing SSL/TLS VPN sessions and handling client-supplied parameter...

8.6CVSS8.2AI score0.00505EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/02 6:23 p.m.•15 views

CVE-2024-20498 Cisco Meraki MX and Z3 Teleworker Gateway AnyConnect VPN Denial of Service Vulnerability

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities are due to insufficie...

8.6CVSS7.1AI score0.00505EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/10/02 4:00 p.m.•21 views

Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Denial of Service Vulnerabilities

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition to the AnyConnect VPN service on an affected device. For more information...

8.6CVSS6.7AI score0.00553EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/02 12:00 a.m.•27 views

PT-2024-18668 · Cisco · Cisco Meraki Z Series Teleworker Gateway +2

Name of the Vulnerable Software and Affected Versions: Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices affected versions not specified Description: A vulnerability in the Cisco AnyConnect VPN server could allow an unauthenticated, remote attacker to cause a DoS condition in t...

7.8CVSS7AI score0.00553EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/10/02 12:00 a.m.•25 views

PT-2024-18669 · Cisco · Cisco Meraki Z Series Teleworker Gateway +2

Name of the Vulnerable Software and Affected Versions: Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices affected versions not specified Description: The issue is due to insufficient validation of client-supplied parameters while establishing an SSL VPN session. An attacker cou...

8.6CVSS6.8AI score0.00505EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•4 views

CVE-2024-20513: Authorization Bypass Through User-Controlled Key

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected device. This vulnerability is due to...

5.8CVSS5.9AI score0.00452EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•4 views

CVE-2024-20509: Concurrent Execution using Shared Resource with Improper Synchronization

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service DoS condition for individual users of the AnyConnect VPN...

5.9CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•3 views

CVE-2024-20502: Uncontrolled Resource Consumption

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to insufficient resource management while establishi...

7.5CVSS7.2AI score0.0052EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•3 views

CVE-2024-20501: Out-of-bounds Write

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities are due to insufficie...

8.6CVSS7.8AI score0.00505EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•2 views

CVE-2024-20500: Uncontrolled Resource Consumption

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vulnerability is due to insufficient resource...

7.5CVSS7.2AI score0.00553EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•3 views

CVE-2024-20499: Out-of-bounds Write

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities are due to insufficie...

8.6CVSS7.8AI score0.00505EPSS
SaveExploits0References1
Rows per page
Query Builder