CVE-2015-0678

CVE-2015-0678 affects Cisco ASA FirePOWER Software (prior to 5.3.1.2) and 5.4.x prior to 5.4.0.1, and ASA Context-Aware (CX) Software prior to 9.3.2.1-9. The vulnerability in the virtualization layer lets an unauthenticated remote attacker cause a denial of service (device reload) by rapidly send...

CVE-2015-6344

CVE-2015-6344 affects Cisco ASA CX Context-Aware Security (web GUI) version 9.3(4.1.11). The vulnerability arises from insufficient authorization controls in the web-based GUI, allowing an authenticated remote user to bypass access restrictions and disclose sensitive user information via an HTTP ...

CVE-2016-9225

The CVE-2016-9225 issue affects the Cisco ASA CX Context-Aware Security module, specifically the data plane IP fragment handler. The root cause is improper handling of IP fragments, allowing an unauthenticated remote attacker to exhaust free packet buffers in shared memory and cause the CX module...

CVE-2016-1301

CVE-2016-1301 affects Cisco ASA-CX Content-Aware Security software prior to 9.3.1.1(112) and Cisco Prime Security Manager prior to 9.3.1.1(112). The RBAC implementation flaw allows remote authenticated users to change arbitrary passwords by sending a crafted HTTP request. Impact is elevated privi...

CVE-2013-1203

Cisco ASA CX Context-Aware Security Software is affected by CVE-2013-1203. The issue arises from invalid parsing of TCP traffic forwarded to Cisco ASA CX, allowing an unauthenticated, remote attacker to trigger a denial of service that reloads the device (Bug CSCue88386). Impact is a full availab...