CVE-2010-4670

CVE-2010-4670 describes a DoS in the IPv6 Neighbor Discovery implementation on Cisco ASA 5500 series (software 8.2(3) and earlier) and Cisco PIX appliances. The vulnerability is triggered by malicious Router Advertisement floods from varying source addresses, exploiting the ND handling to cause C...

CVE-2011-0394

The CVE-2011-0394 issue affects Cisco ASA 5500 series (software 7.0 before 7.0(8.11); 7.1/7.2 before 7.2(5.1); 8.0 before 8.0(5.19); 8.1 before 8.1(2.47); 8.2 before 8.2(2.19); 8.3 before 8.3(1.8)); Cisco PIX 500 series; and Cisco FWSM 3.1/3.2/4.0/4.1. It allows remote attackers to cause a device...

CVE-2012-4661

CVE-2012-4661 : A stack-based buffer overflow in Cisco’s DCERPC inspection engine affects ASA 5500 series (and ASASM in Catalyst 6500) and FWSM, allowing an unauthenticated remote attacker to execute arbitrary code via a crafted DCERPC packet. Affected versions include ASA 8.3 before 8.3(2.34), 8...

CVE-2013-1215

CVE-2013-1215 concerns Cisco ASA 5505 devices where the vpnclient tool in the Easy VPN component allows an authenticated, local attacker to escalate privileges due to a mis-handling of privilege levels (Bug CSCuf85295). Affected hardware/software is Cisco ASA with the Easy VPN feature; exploitati...

CVE-2011-0393

Cisco ASA 5500 Series and PIX 500 devices in transparent firewall mode (with IPv6 disabled) are affected by CVE-2011-0393 due to packet buffer exhaustion when IPv6 traffic is processed. Cisco bug CSCtj04707 describes this condition. Exploitation could cause a denial of service (packet buffers dep...

CVE-2012-0353

CVE-2012-0353 affects Cisco ASA 5500 series (and ASA Services Module in Catalyst 6500) with ASA software versions 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.5), 8.3 before 8.3(2.22), 8.4 before 8.4(2.1), and 8.5 before 8.5(1.2). The UDP inspection engine fails to handle flows pr...

CVE-2011-0379

CVE-2011-0379 is a buffer overflow in Cisco TelePresence components triggered by crafted Cisco Discovery Protocol packets. Affected products include Cisco ASA 5500 series with software 1.6.x, Cisco TelePresence Multipoint Switch (CTMS) with 1.0.x–1.6.x, Cisco TelePresence endpoints (1.2.x–1.6.x),...

CVE-2010-4672

CVE-2010-4672 affects Cisco ASA 5500 series devices running software 8.2(3) and earlier. The issue allows remote attackers to cause a denial-of-service through EIGRP traffic that triggers an EIGRP multicast storm (block exhaustion). The vulnerability is documented under Bug ID CSCtf20269. Affecte...

CVE-2010-4682

Cisco ASA 5500 series devices running software before 8.2(3) are affected by a memory leak that can be exploited by remote attackers via multiple incorrect LDAP authentication attempts, leading to a denial of service. The issue is documented as Bug CSCtf29867. A fix is available in version 8.2(3)...

CVE-2011-3299

CVE-2011-3299 corresponds to four SunRPC Inspection Denial of Service vulnerabilities (CVE-2011-3299, -3300, -3301, -3302) affecting Cisco ASA 5500 Series and ASA Services Module, and the Cisco FWSM. Affected by crafted SunRPC traffic that can cause device reloads; impacts include DoS. The Cisco ...

CVE-2012-4643

CVE-2012-4643 affects Cisco ASA 5500 Series and ASA Services Module (ASASM) in Catalyst 6500; the DHCP server does not properly allocate memory for DHCP packets, leading to a denial-of-service via crafted IPv4 packets and a device reload (Bug CSCtw84068). Affected software versions are 7.0–7.2(5....

CVE-2012-4662

The CVE-2012-4662 issue affects Cisco ASA 5500 series (and ASA ASASM on Catalyst 6500) and FWSM 4.1 on 6500/7600 platforms. The root cause is a flaw in the DCERPC inspection engine that allows remote, unauthenticated adversaries to trigger a denial of service resulting in a device reload via a cr...

CVE-2012-0354

CVE-2012-0354 affects Cisco ASA 5500 Series and ASA Services Module (ASASM) on Catalyst 6500. The Threat Detection feature, when configured with Scanning Threat and shun enabled, can be triggered by IPv4/IPv6 traffic to cause a device reload (DoS). Affected software versions and fixes per Cisco a...

CVE-2012-0356

CVE-2012-0356 affects Cisco ASA 5500 series and ASASM, plus the FWSM on Catalyst 6500, when multicast routing is enabled. The vulnerability arises from improper handling of PIM messages, potentially allowing a remote attacker to trigger a device reload. Affected software ranges include ASA/ASASM ...

CVE-2012-3058

CVE-2012-3058 affects Cisco ASA 5500 series and ASA Services Module (ASASM) in Cisco Catalyst 6500 switches. Vulnerable software versions are ASA 8.4 prior to 8.4(4.1), 8.5 prior to 8.5(1.11), and 8.6 prior to 8.6(1.3). The issue allows remote attackers to cause a denial of service (device reload...

CVE-2011-3303

CVE-2011-3303 affects Cisco ASA 5500 Series and ASA Services Module (Catalyst 6500) and the FWSM, enabling an unauthenticated remote attacker to trigger a denial-of-service by sending malformed ILS traffic, causing the device to reload. The issue is tied to ILS inspection and is documented across...

CVE-2012-0335

Cisco ASA 5500 series devices running ASA software 7.2–8.4 are affected by an information-disclosure vulnerability in cut-through proxy authentication. The root cause is improper proxy authentication during attempts to cut through traffic, enabling unauthenticated remote attackers to obtain sensi...

CVE-2009-5037

Cisco ASA 5500 series devices with software before 8.2(3) are affected by CVE-2009-5037. The issue enables remote attackers to cause a denial of service (ASDM syslog outage) by sending a long URL, associated with Bug IDs CSCsm11264 and CSCtb92911. Exploitation details are not provided beyond the ...

CVE-2012-4663

CVE-2012-4663 covers a DCERPC inspection engine vulnerability in Cisco ASA 5500 series devices and the ASASM/ FWSM modules. The issue allows remote, unauthenticated attackers to trigger a denial of service (device reload) by sending a crafted DCERPC packet. Affected products and versions include:...

CVE-2013-1149

CVE-2013-1149 affects Cisco ASA and FWSM: remote attackers can cause a denial of service (device reload) by sending a crafted IKEv1 message. Affected software ranges include ASA 7.x up to 7.2(5.10), 8.0 up to 8.0(5.28), 8.1/8.2 up to 8.2(5.35), 8.3 up to 8.3(2.34), 8.4 up to 8.4(4.11), 8.6 up to ...

CVE-2011-3285

CVE-2011-3285 describes a CRLF injection in the Cisco ASA 5500 series, affecting software versions 8.0 through 8.4 in the /+CSCOE+/logon.html endpoint. The vulnerability allows remote attackers to inject arbitrary HTTP headers and carry out HTTP response splitting via unspecified vectors (Bug ID ...

CVE-2011-3298

CVE-2011-3298 is a TACACS+ authentication bypass affecting Cisco ASA 5500 Series and Cisco FWSM. Cisco PSIRT advisories (cisco-sa-20111005-asa and cisco-sa-20111005-fwsm) document the vulnerability and note that a crafted TACACS+ reply can bypass authentication. The advisory sections also list re...

CVE-2010-4692

CVE-2010-4692 affects Cisco ASA 5500-series devices running software before 8.3(2). The vulnerability allows a remote attacker to cause a denial-of-service (device crash) by initiating a large number of LAN-to-LAN IPsec sessions (L2L), per Bug ID CSCth36592. Affected component is the IPsec/L2L ha...

CVE-2011-3301

CVE-2011-3301 covers SunRPC Inspection DoS in Cisco ASA 5500 Series and Cisco Catalyst 6500 Series ASA Services Module, plus FWSM; crafted SunRPC traffic can cause a remote device reload. The advisory lists affected software trains and the earliest fixed releases (e.g., ASA FWSM: 3.1→21, 3.2→22, ...

CVE-2011-3304

CVE-2011-3304 affects Cisco ASA 5500 Series appliances and the ASA Services Module in Cisco Catalyst 6500 Series devices. The issue is a Denial of Service: unauthenticated remote attackers can trigger a device reload by sending crafted MSN Instant Messenger traffic to MSN IM inspection. Affects s...

CVE-2012-2472

CVE-2012-2472 affects Cisco ASA 5500 series devices on software versions 8.2 and 8.4 . When SIP inspection is enabled, the device may allocate many identical secondary pinholes, enabling a remote attacker to cause a denial of service via crafted SIP traffic. Root cause: creation of duplicate pre-...

CVE-2010-4680

The CVE-2010-4680 affects Cisco ASA 5500 series WebVPN: prior to 8.2(3), CIFS shares could be viewed even when CIFS file browsing was disabled, allowing remote authenticated users to bypass access restrictions via CIFS requests (Bug CSCsz80777). Impact is high: attackers with network access can a...

CVE-2011-3300

Cisco CVE-2011-3300 covers SunRPC inspection DoS vulnerabilities in Cisco ASA 5500 Series and the ASA Services Module (FWSM) for Catalyst 6500/7600. Affected product scope includes ASA software trains 7.0, 7.1, 7.2, 8.0–8.5 (specific fixed releases per train) and the FWSM software 3.1–4.x. The vu...

CVE-2012-0355

CVE-2012-0355 affects Cisco ASA/ASASM: software versions 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4) may allow a remote attacker to trigger a denial of service (device reload) by IPv4 or IPv6 packets that generate syslog message 305006. Root cause is the handling of syslog-triggered events leadi...

CVE-2011-2060

CVE-2011-2060 affects Cisco ASA 5500 platform-sw component. Non-ASCII characters in an interface description can cause a denial of service (reload without configuration). Impact is local access required. Affected versions: ASA 5500 series 8.2 before 8.2(5.3); 8.3 before 8.3(2.20); 8.4 before 8.4(...

CVE-2011-3302

CVE-2011-3302 affects Cisco ASA 5500 series (and FWSM on Catalyst 6500) with specific ASA/FWSM software trains: 7.0 up to before 7.0(8.13), 7.1/7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1/8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1); FWSM 3.1 before ...

CVE-2012-4660

The issue CVE-2012-4660 affects Cisco ASA 5500 series (and ASASM in Catalyst 6500) SIP inspection engine. Versions 8.2 before 8.2(5.17), 8.3 before 8.3(2.28), 8.4 before 8.4(2.13), 8.5 before 8.5(1.4), and 8.6 before 8.6(1.5) are vulnerable to remote, unauthenticated denial of service (device rel...

CVE-2010-4677

CVE-2010-4677 affects Cisco ASA 5500 series devices running software before 8.2(3). The vulnerability allows remote attackers to cause a denial of service (daemon crash) by requesting a document whose name contains space characters in emWEB. Affected component is emWEB on ASA; root cause is input...

CVE-2010-4678

CVE-2010-4678 affects Cisco ASA 5500 series devices running software before 8.2(3). The issue permits packets to pass before the configuration is loaded, potentially allowing remote attackers to bypass intended access restrictions by sending traffic during device startup. The root cause is the pr...

CVE-2012-0378

CVE-2012-0378 affects Cisco ASA 5500 series with software 8.0–8.4. The issue allows remote attackers to cause a denial of service (connection limit exceeded) by triggering many stale connections, leading to an incorrect MPF connection count (Bug ID CSCtv19854). Exploitation details are not provid...

CVE-2010-4679

CVE-2010-4679 affects Cisco ASA 5500 series devices running software before 8.2(3). The root cause is improper handling of OCSP connection failures, which can be triggered by remote OCSP responders and leads to denial of service via TCP socket exhaustion. The entry attributes this to Bug ID CSCsz...

CVE-2010-4691

CVE-2010-4691 affects Cisco ASA 5500 series appliances running software older than 8.3(2). The vulnerability allows remote attackers to cause a denial-of-service (device crash) by sending multicast traffic, as described in Bug IDs CSCtg61810/CSCtg69742. Connected sources confirm the affected soft...

CVE-2011-4006

The CVE-2011-4006 issue affects Cisco ASA 5500 series with software 8.2–8.5, caused by a vulnerability in the ESMTP inspection feature that can be exploited to trigger a denial-of-service via an unspecified closing sequence, leading to CPU consumption. Remediation/mitigation reported in connected...

CVE-2012-2474

CVE-2012-2474 affects Cisco ASA 5500 series running 8.2–8.4 with clientless WebVPN enabled. A memory leak caused by improper handling of user-supplied requests can allow an authenticated, remote attacker to cause denial of service (memory consumption and blank response page). The issue is tracked...

CVE-2012-4659

The CVE-2012-4659 issue affects Cisco ASA 5500 series and ASASM on Catalyst 6500, where the AAA IPv4 SSL VPN authentication path can be abused by remote attackers to trigger a device reload (DoS) via a crafted authentication response. Affected software versions are 8.2 before 8.2(5.30) and 8.3 be...

CVE-2010-4681

CVE-2010-4681 affects Cisco ASA 5500 series appliances running software prior to 8.2(3). The vulnerability allows remote attackers to bypass SMTP inspection by exploiting a prepended space in SMTP traffic, categorized as a partial impact on confidentiality, integrity, and availability. The issue ...

CVE-2010-4690

The issue concerns Cisco ASA 5500 series devices’ Mobile User Security (MUS) service. Vulnerable component: MUS, which does not properly authenticate HTTP requests from a Web Security appliance (WSA). Root cause: improper authentication may allow an attacker to obtain sensitive information via a ...

CVE-2012-0358

CVE-2012-0358 affects Cisco ASA 5500 Series devices' Clientless VPN with the Cisco Port Forwarder ActiveX control (cscopf.ocx). The root cause is a buffer overflow in initialization parameters, enabling remote code execution. Affected software versions include ASA 7.0–7.2 (before 7.2(5.6)), 8.0 (...

CVE-2010-4673

Cisco ASA 5500 series devices running software 8.2(4) and earlier are affected by CVE-2010-4673. The issue permits remote attackers to cause a denial-of-service through a flood of packets (Bug ID CSCtg06316). The affected component is the ASA software handling packet traffic on 8.2(4) and earlier...

CVE-2010-4674

CVE-2010-4674 affects Cisco ASA 5500 series devices running software 8.2(4) and earlier. The vulnerability allows remote attackers to cause a denial of service (block exhaustion) via multicast traffic (Bug ID CSCtg63992). Impact details are conveyed across sources: affected product is ASA 5500 se...

CVE-2010-4676

Cisco ASA 5500 series devices running software before 8.2(3) are affected by CVE-2010-4676. The issue allows remote authenticated users to cause a denial of service (device crash) by sending a high volume of IPsec traffic, identified as Bug ID CSCsx52748. The PT-2011-1631 entry confirms the vulne...

CVE-2012-5415

CVE-2012-5415 is a race condition affecting Cisco Adaptive Security Appliances (ASA) where an attacker can trigger denial of service (CPU consumption or device reload) by opening multiple connections. The issue arises from improper handling of hash lookups for secondary flows (Bug IDs CSCue31622 ...

CVE-2010-4688

Cisco ASA 5500 series devices (pre-8.3(2)) are affected by CVE-2010-4688 due to an issue in the SIP inspection feature that can cause a device crash when processing many SIP calls. The vulnerability affects ASA firmware versions prior to 8.3(2). The root cause is described as an unspecified vulne...

CVE-2010-4675

Cisco ASA 5500 series devices running versions prior to 8.2(3) are affected by CVE-2010-4675 due to a bug (CSCsv40504) that causes improper determination of which interfaces TELNET connections should be permitted. This can allow remote authenticated users to bypass intended access restrictions by...

CVE-2010-4689

CVE-2010-4689 affects Cisco ASA 5500 series with software before 8.3(2). After a migration, ACL behavior is not preserved, allowing remote attackers to bypass previously denied access restrictions via a certain type of network traffic. Root cause is the ACL preservation bug CSCte46460 observed du...