CVE-2010-1580

CVE-2010-1580 describes a SunRPC inspection DoS in Cisco ASA 5500 Series and Cisco PIX 500 series: unauthenticated remote attackers can cause a device reload via crafted SunRPC UDP packets. Affected products and fixed versions derived from connected sources: Cisco ASA OS 7.2.x pre-7.2(5); 8.0.x p...

CVE-2007-5569

Cisco PIX/ASA appliances running 7.1–7.2 are affected by a denial-of-service that can cause a device reload when processing MGCP or TLS traffic. The issue manifests when handling crafted packets to the appliance, with the root cause described as a flaw in processing certain MGCP/TLS data sequence...

CVE-2010-1581

The CVE-2010-1581 issue affects Cisco ASA 5500 Series and PIX 500 devices, caused by an unspecified TLS implementation vulnerability that can allow an unauthenticated remote attacker to trigger a denial of service (device reload) with crafted TLS packets. Concrete details from connected records s...

CVE-2010-2814

CVE-2010-2814 affects Cisco ASA 5500 Series (and PIX 500) TLS implementation. A sequence of crafted TLS packets can trigger a denial of service, causing the device to reload (unavailability). Reported as Bug CSCtf37506. Affected software and fixed releases per sources: 7.2.x before 7.2(5) → upgra...

CVE-2013-1152

CVE-2013-1152 affects Cisco ASA devices running software 9.0 before 9.0(1.2). A crafted field in a DNS message can trigger a denial-of-service, causing a device reload. Mitigation: upgrade to ASA 9.0(1.2) or later (see Cisco advisory). The issue is specific to the DNS inspection/vector handling d...

CVE-2013-3463

The CVE-2013-3463 issue affects Cisco ASA Software where the protocol-inspection idle timeout is not honored for certain inspected connections. An unauthenticated, remote attacker can send crafted requests to exhaust the ASA’s connection table, causing a denial-of-service by preventing new connec...

CVE-2017-12265

Cisco CVE-2017-12265 affects the Cisco ASA web-based management interface when WEBVPN is enabled. It is a cross-site scripting (XSS) vulnerability caused by insufficient input validation, exploitable by convincing a user to click a crafted link, enabling arbitrary script execution or access to br...

CVE-2014-0655

Cisco ASA with Identity Firewall (IDFW) is affected by CVE-2014-0655 due to insufficient validation of RADIUS Change of Authorization (CoA) messages, allowing unauthenticated remote attackers to replay crafted CoA messages and modify the IDFW user cache. This is tied to Bug CSCuj45332. The vulner...

CVE-2014-0653

The Cisco ASA Identity Firewall (IDFW) NetBIOS logout probe vulnerability (CVE-2014-0653) stems from insufficient validation of NetBIOS probe responses, allowing an unauthenticated remote attacker to modify a user’s authentication state. Cisco notes the issue in Cisco-SA-20140108-CVE-2014-0653 an...

CVE-2012-6395

Cisco ASA devices running firmware 8.4 are affected by an input validation issue for UNC share pathnames. The vulnerability allows remote authenticated users to trigger a denial of service (device crash) due to improper validation of unspecified input. No explicit exploit details are provided in ...

CVE-2013-1138

CVE-2013-1138 concerns Cisco ASA devices where the NAT process can be abused by unauthenticated, remote attackers sending crafted packets to exhaust the connections-table memory, causing a DoS. The vulnerability (Bug ID CSCue46386) affects Cisco ASA software and is described as a NAT handling fla...

CVE-2012-5415

CVE-2012-5415 is a race condition affecting Cisco Adaptive Security Appliances (ASA) where an attacker can trigger denial of service (CPU consumption or device reload) by opening multiple connections. The issue arises from improper handling of hash lookups for secondary flows (Bug IDs CSCue31622 ...

CVE-2013-1150

CVE-2013-1150 affects Cisco ASA/ASA-enabled devices via the authentication-proxy component. The DoS flaw allows remote attackers to trigger a device reload with a crafted URL, impacting ASA software versions across multiple trainings: 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1–8.2 before 8.2...