CVE-2013-0149

CVE-2013-0149: The OSPF implementation in Cisco IOS (12.0–12.4, 15.0–15.3), IOS-XE 2.x–3.9.xS, ASA/PIX 7.x–9.1, FWSM, NX-OS, and StarOS before 14.0.50488 fails to properly validate LSA type 1 packets before updating the LSA database, enabling remote attackers to cause a denial of service (routing...

CVE-2010-4670

CVE-2010-4670 describes a DoS in the IPv6 Neighbor Discovery implementation on Cisco ASA 5500 series (software 8.2(3) and earlier) and Cisco PIX appliances. The vulnerability is triggered by malicious Router Advertisement floods from varying source addresses, exploiting the ND handling to cause C...

CVE-2011-0396

CVE-2011-0396 affects Cisco ASA 5500 Series devices with ASA software versions 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13). When a Certificate Authority (CA) is configured, remote attackers could read arbitrary files via unspecified vectors. This vuln...

CVE-2010-0149

CVE-2010-0149 affects Cisco ASA 5500 Series (and Cisco PIX 500) where remote attackers can trigger a TCP connection exhaustion DoS by sending crafted TCP segments during connection termination, leaving connections in CLOSEWAIT. Root cause is specific TCP segments that bypass normal termination ha...

CVE-2013-1215

CVE-2013-1215 concerns Cisco ASA 5505 devices where the vpnclient tool in the Easy VPN component allows an authenticated, local attacker to escalate privileges due to a mis-handling of privilege levels (Bug CSCuf85295). Affected hardware/software is Cisco ASA with the Easy VPN feature; exploitati...

CVE-2011-0394

The CVE-2011-0394 issue affects Cisco ASA 5500 series (software 7.0 before 7.0(8.11); 7.1/7.2 before 7.2(5.1); 8.0 before 8.0(5.19); 8.1 before 8.1(2.47); 8.2 before 8.2(2.19); 8.3 before 8.3(1.8)); Cisco PIX 500 series; and Cisco FWSM 3.1/3.2/4.0/4.1. It allows remote attackers to cause a device...

CVE-2011-0393

Cisco ASA 5500 Series and PIX 500 devices in transparent firewall mode (with IPv6 disabled) are affected by CVE-2011-0393 due to packet buffer exhaustion when IPv6 traffic is processed. Cisco bug CSCtj04707 describes this condition. Exploitation could cause a denial of service (packet buffers dep...

CVE-2012-5717

CVE-2012-5717 affects Cisco ASA devices running firmware 8.x through 8.4(1). The issue is a flaw in the management of remote SSH sessions, allowing an authenticated remote user to cause a denial of service by establishing multiple concurrent SSH sessions, potentially crashing the device. Connecte...

CVE-2007-0961

Cisco PIX 500, ASA 5500 Series, and FWSM (3.x) are affected when SIP inspection is enabled. A vulnerability in SIP message handling allows remote, unauthenticated attackers to trigger a DoS by sending malformed SIP packets, potentially causing device reloads/reboots. Affected versions include ASA...

CVE-2010-2816

CVE-2010-2816 is a Cisco ASA 5500 Series DoS vulnerability in the SIP inspection feature. An unauthenticated, network-scoped attacker can trigger a device reload by sending crafted SIP packets. Affected software versions are ASA 5500 Series with 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2...

CVE-2010-4682

Cisco ASA 5500 series devices running software before 8.2(3) are affected by a memory leak that can be exploited by remote attackers via multiple incorrect LDAP authentication attempts, leading to a denial of service. The issue is documented as Bug CSCtf29867. A fix is available in version 8.2(3)...

CVE-2011-0379

CVE-2011-0379 is a buffer overflow in Cisco TelePresence components triggered by crafted Cisco Discovery Protocol packets. Affected products include Cisco ASA 5500 series with software 1.6.x, Cisco TelePresence Multipoint Switch (CTMS) with 1.0.x–1.6.x, Cisco TelePresence endpoints (1.2.x–1.6.x),...

CVE-2007-0960

Cisco PIX 500 and ASA 5500 Series appliances (7.2.2) with LOCAL user authentication are affected by a privilege-escalation vulnerability. An authenticated remote attacker who is defined in the local database with privilege 0 can gain administrative privileges due to the LOCAL authentication path....

CVE-2007-0962

Cisco PIX 500, ASA 5500 Series, and FWSM devices are affected by a DoS vulnerability triggered by malformed HTTP traffic when the built-in HTTP inspection (inspect http) is enabled. A remote attacker can cause a device reboot, with impact described as an availability loss. Affected versions are: ...

CVE-2011-3299

CVE-2011-3299 corresponds to four SunRPC Inspection Denial of Service vulnerabilities (CVE-2011-3299, -3300, -3301, -3302) affecting Cisco ASA 5500 Series and ASA Services Module, and the Cisco FWSM. Affected by crafted SunRPC traffic that can cause device reloads; impacts include DoS. The Cisco ...

CVE-2010-4672

CVE-2010-4672 affects Cisco ASA 5500 series devices running software 8.2(3) and earlier. The issue allows remote attackers to cause a denial-of-service through EIGRP traffic that triggers an EIGRP multicast storm (block exhaustion). The vulnerability is documented under Bug ID CSCtf20269. Affecte...

CVE-2010-0568

CVE-2010-0568 describes an NTLMv1 authentication bypass vulnerability affecting Cisco ASA 5500 Series (and PIX 500 Series) where a crafted username can bypass NTLMv1 authentication. The issue is documented in Cisco’s advisory with multiple related vulnerabilities; for NTLMv1 specifically, fixed s...

CVE-2010-2815

CVE-2010-2815 affects Cisco ASA 5500 Series and PIX 500 series TLS/SSL processing. A DoS can be triggered by a sequence of crafted TLS packets, causing a device reload. Affected software versions and fixed releases are documented in Cisco PSIRT: upgrade to 7.2(5) or later for 7.2.x, 8.0(5.15) or ...

CVE-2010-4692

CVE-2010-4692 affects Cisco ASA 5500-series devices running software before 8.3(2). The vulnerability allows a remote attacker to cause a denial-of-service (device crash) by initiating a large number of LAN-to-LAN IPsec sessions (L2L), per Bug ID CSCth36592. Affected component is the IPsec/L2L ha...

CVE-2006-3073

CVE-2006-3073 describes multiple XSS vulnerabilities in Cisco WebVPN for VPN 3000 Series Concentrators and ASA 5500 Series in WebVPN clientless mode. The flaw allows remote attackers to inject arbitrary web script or HTML via the domain parameter in dnserror.html and connecterror.html (bug IDs CS...

CVE-2009-5037

Cisco ASA 5500 series devices with software before 8.2(3) are affected by CVE-2009-5037. The issue enables remote attackers to cause a denial of service (ASDM syslog outage) by sending a long URL, associated with Bug IDs CSCsm11264 and CSCtb92911. Exploitation details are not provided beyond the ...

CVE-2010-0567

CVE-2010-0567 affects Cisco ASA 5500 Series and Cisco PIX 500 Series. A vulnerability in processing malformed IKE messages through an existing IPsec tunnel to UDP port 4500 can cause denial of service by tearing down all IPsec tunnels terminating on the device and prevent new tunnels from being e...

CVE-2011-3302

CVE-2011-3302 affects Cisco ASA 5500 series (and FWSM on Catalyst 6500) with specific ASA/FWSM software trains: 7.0 up to before 7.0(8.13), 7.1/7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1/8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1); FWSM 3.1 before ...

CVE-2011-3303

CVE-2011-3303 affects Cisco ASA 5500 Series and ASA Services Module (Catalyst 6500) and the FWSM, enabling an unauthenticated remote attacker to trigger a denial-of-service by sending malformed ILS traffic, causing the device to reload. The issue is tied to ILS inspection and is documented across...

CVE-2008-3815

CVE-2008-3815 affects Cisco ASA/PIX devices (5500 series) when VPNs are configured with Windows NT Domain authentication. The vulnerability allows remote attackers to bypass VPN authentication via unknown vectors. Affected software versions and first fixed releases are: 7.0 before 7.0(8)3; 7.1 be...

CVE-2010-4680

The CVE-2010-4680 affects Cisco ASA 5500 series WebVPN: prior to 8.2(3), CIFS shares could be viewed even when CIFS file browsing was disabled, allowing remote authenticated users to bypass access restrictions via CIFS requests (Bug CSCsz80777). Impact is high: attackers with network access can a...

CVE-2010-0566

Cisco ASA 5500 Series Vulnerability (CVE-2010-0566): a crafted TCP segment can trigger a reload/DoS when a nailed static NAT and the inline Cisco AIP-SSM are used. Affected: ASA 7.0.x, 7.1.x, 7.2.x, 8.0.x, 8.1.x, 8.2.x. First fixed releases: 7.2(4.45), 8.0(4.44), 8.1(2.35), 8.2(1.10). Mitigation:...

CVE-2011-3304

CVE-2011-3304 affects Cisco ASA 5500 Series appliances and the ASA Services Module in Cisco Catalyst 6500 Series devices. The issue is a Denial of Service: unauthenticated remote attackers can trigger a device reload by sending crafted MSN Instant Messenger traffic to MSN IM inspection. Affects s...

CVE-2010-2814

CVE-2010-2814 affects Cisco ASA 5500 Series (and PIX 500) TLS implementation. A sequence of crafted TLS packets can trigger a denial of service, causing the device to reload (unavailability). Reported as Bug CSCtf37506. Affected software and fixed releases per sources: 7.2.x before 7.2(5) → upgra...

CVE-2010-2817

CVE-2010-2817 concerns an unspecified DoS vulnerability in the IKE implementation of Cisco ASA 5500-series devices (and Cisco PIX 500-series) that can cause a device reload via a crafted IKE message. Connected documents confirm affected software ranges and fixed versions: ASA 7.0 up to 7.0(8.11);...

CVE-2011-0395

Cisco ASA 5500 Series devices are affected by CVE-2011-0395 when RIP is enabled together with the Cisco Phone Proxy feature. The issue allows remote attackers to trigger a denial of service (device reload) via crafted RIP updates. Affected software versions include 8.0 before 8.0(5.20), 8.1 befor...

CVE-2011-3298

CVE-2011-3298 is a TACACS+ authentication bypass affecting Cisco ASA 5500 Series and Cisco FWSM. Cisco PSIRT advisories (cisco-sa-20111005-asa and cisco-sa-20111005-fwsm) document the vulnerability and note that a crafted TACACS+ reply can bypass authentication. The advisory sections also list re...

CVE-2011-3301

CVE-2011-3301 covers SunRPC Inspection DoS in Cisco ASA 5500 Series and Cisco Catalyst 6500 Series ASA Services Module, plus FWSM; crafted SunRPC traffic can cause a remote device reload. The advisory lists affected software trains and the earliest fixed releases (e.g., ASA FWSM: 3.1→21, 3.2→22, ...

CVE-2007-0959

Cisco PIX 500 Series Security Appliances and Cisco ASA 5500 Series ASA contain a vulnerability (CVE-2007-0959) that can cause a DoS via malformed TCP packets when the device is configured to inspect certain TCP-based protocols. The root cause is insufficient handling of malformed TCP streams, all...

CVE-2010-4677

CVE-2010-4677 affects Cisco ASA 5500 series devices running software before 8.2(3). The vulnerability allows remote attackers to cause a denial of service (daemon crash) by requesting a document whose name contains space characters in emWEB. Affected component is emWEB on ASA; root cause is input...

CVE-2010-4678

CVE-2010-4678 affects Cisco ASA 5500 series devices running software before 8.2(3). The issue permits packets to pass before the configuration is loaded, potentially allowing remote attackers to bypass intended access restrictions by sending traffic during device startup. The root cause is the pr...

CVE-2011-3300

Cisco CVE-2011-3300 covers SunRPC inspection DoS vulnerabilities in Cisco ASA 5500 Series and the ASA Services Module (FWSM) for Catalyst 6500/7600. Affected product scope includes ASA software trains 7.0, 7.1, 7.2, 8.0–8.5 (specific fixed releases per train) and the FWSM software 3.1–4.x. The vu...

CVE-2010-0150

CVE-2010-0150 affects Cisco ASA 5500 Series and Cisco PIX 500 Series, where malformed SIP messages sent to transit traffic can trigger a denial-of-service that reloads the device when SIP inspection is enabled. Cisco’s advisory ties this to two SIP-inspection DoS bugs (CSCsy91157 and CSCtc96018) ...

CVE-2010-0569

CVE-2010-0569 is a Cisco ASA 5500 Series SIP Inspection DoS vulnerability. A malformed SIP message can trigger a reload of the appliance, affecting ASA versions 7.x, 8.0.x, 8.1.x and 8.2.x (including PIX 500). The Cisco advisory CSCsa-20100217-asa lists affected bug IDs CSCtc96018 among others an...

CVE-2010-4354

The CVE covers a vulnerability in Cisco VPN products where remote attackers could enumerate valid VPN group names by sending an IKE Aggressive Mode packet with the group name in the ID field. Affected devices include ASA 5500 series, PIX 500 series, and VPN Concentrators 3000 series. Root cause i...

CVE-2010-4674

CVE-2010-4674 affects Cisco ASA 5500 series devices running software 8.2(4) and earlier. The vulnerability allows remote attackers to cause a denial of service (block exhaustion) via multicast traffic (Bug ID CSCtg63992). Impact details are conveyed across sources: affected product is ASA 5500 se...

CVE-2010-4676

Cisco ASA 5500 series devices running software before 8.2(3) are affected by CVE-2010-4676. The issue allows remote authenticated users to cause a denial of service (device crash) by sending a high volume of IPsec traffic, identified as Bug ID CSCsx52748. The PT-2011-1631 entry confirms the vulne...

CVE-2010-4679

CVE-2010-4679 affects Cisco ASA 5500 series devices running software before 8.2(3). The root cause is improper handling of OCSP connection failures, which can be triggered by remote OCSP responders and leads to denial of service via TCP socket exhaustion. The entry attributes this to Bug ID CSCsz...

CVE-2010-4690

The issue concerns Cisco ASA 5500 series devices’ Mobile User Security (MUS) service. Vulnerable component: MUS, which does not properly authenticate HTTP requests from a Web Security appliance (WSA). Root cause: improper authentication may allow an attacker to obtain sensitive information via a ...

CVE-2010-4681

CVE-2010-4681 affects Cisco ASA 5500 series appliances running software prior to 8.2(3). The vulnerability allows remote attackers to bypass SMTP inspection by exploiting a prepended space in SMTP traffic, categorized as a partial impact on confidentiality, integrity, and availability. The issue ...

CVE-2010-0565

Cisco ASA 5500 Series is affected by CVE-2010-0565 via a WebVPN DTLS Denial of Service vulnerability. A malformed DTLS message sent to the DTLS port (default UDP 443) can cause a page fault and device reload when WebVPN and DTLS are enabled. Affected software versions include 7.2.x before 7.2(4.4...

CVE-2010-4691

CVE-2010-4691 affects Cisco ASA 5500 series appliances running software older than 8.3(2). The vulnerability allows remote attackers to cause a denial-of-service (device crash) by sending multicast traffic, as described in Bug IDs CSCtg61810/CSCtg69742. Connected sources confirm the affected soft...

CVE-2012-6395

Cisco ASA devices running firmware 8.4 are affected by an input validation issue for UNC share pathnames. The vulnerability allows remote authenticated users to trigger a denial of service (device crash) due to improper validation of unspecified input. No explicit exploit details are provided in ...

CVE-2010-4673

Cisco ASA 5500 series devices running software 8.2(4) and earlier are affected by CVE-2010-4673. The issue permits remote attackers to cause a denial-of-service through a flood of packets (Bug ID CSCtg06316). The affected component is the ASA software handling packet traffic on 8.2(4) and earlier...

CVE-2010-4688

Cisco ASA 5500 series devices (pre-8.3(2)) are affected by CVE-2010-4688 due to an issue in the SIP inspection feature that can cause a device crash when processing many SIP calls. The vulnerability affects ASA firmware versions prior to 8.3(2). The root cause is described as an unspecified vulne...