Cisco

Adaptive Security Appliance Software

329 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2014-2120

Warnung
  • EPSS 14.03%
  • Veröffentlicht 19.03.2014 01:15:04
  • Zuletzt bearbeitet 21.04.2026 18:07:39

Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.

4.3

CVE-2014-0738

  • EPSS 0.73%
  • Veröffentlicht 22.02.2014 21:55:09
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj66770.

7.1

CVE-2013-6696

  • EPSS 1.17%
  • Veröffentlicht 02.12.2013 22:55:36
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service (device reload) via a malformed response, aka Bug ID CSCuj28861.

6.4

CVE-2013-6682

  • EPSS 0.75%
  • Veröffentlicht 13.11.2013 15:55:04
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service (connection-database corruption) via an i...

5.4

CVE-2013-5560

  • EPSS 2.03%
  • Veröffentlicht 13.11.2013 15:55:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service (device reload) via crafted...

7.1

CVE-2013-5568

  • EPSS 1.17%
  • Veröffentlicht 13.11.2013 15:55:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service (device reload) via crafted update data, aka Bug ID CSCui33308.

6.3

CVE-2013-5551

  • EPSS 0.97%
  • Veröffentlicht 01.11.2013 02:55:05
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and management-access options are enabled, allows remote authenticated users to cause a denial of service (stack overflow and device reload) by using the clientless ...

5.4

CVE-2013-5544

  • EPSS 1.66%
  • Veröffentlicht 22.10.2013 11:17:15
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (device reload) by sending many username-from-cert IKE requests, aka Bug ID CSCua91108.

8.5

CVE-2013-5542

  • EPSS 1.88%
  • Veröffentlicht 21.10.2013 10:54:30
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.2), 8.7 before 8.7(1.8), 9.0 before 9.0(3.6), and 9.1 before 9.1(2.8) allows remote attackers to cause a denial of service (firewall-session disruption or device reload) via crafted IC...

7.1

CVE-2013-5507

  • EPSS 1.17%
  • Veröffentlicht 13.10.2013 10:20:04
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7), when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service (device reload) via a (1) ICMP or (2) ICMPv6 packet that is im...