Advisories · Technology
Cisco Adaptive Security Appliance (ASA) Software.
Every CVE that names Cisco Adaptive Security Appliance (ASA) Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.0 CriticalCritical · CVSS 9+
Heap-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XR Software
- Memory corruption
- CVSS 5.8 Medium
Memory leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 5.8 Medium
Memory leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.5 High
Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1287
- CVSS 7.7 High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1287
- CVSS 8.6 High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 6.0 Medium
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arb…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-146
- CVSS 6.0 Medium
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arb…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1244
- CVSS 5.8 Medium
Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 5.8 Medium
Memory leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 5.3 Medium
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Bypass Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 8.6 High
Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 4.3 Medium
Cisco Adaptive Security Appliance and Firepower Threat Defense Software DHCP Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 7.7 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software and IOS XE Software IKEv2 Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Memory corruption
- CVSS 6.1 Medium
Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software Web Services Interface Cross-Site Scripting Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Uncontrolled resource consumption in Cisco Adaptive Security Appliance (ASA) Software
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 8.6 High
Improper input validation in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-20
- CVSS 8.6 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1287
- CVSS 5.3 Medium
Resource leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 6.0 Medium
Code injection in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Code injection
- CVSS 5.8 MediumCritical · KEVKEV
Resource leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
NULL pointer dereference in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 7.7 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1287
- CVSS 8.6 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA)…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 5.8 Medium
Authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 6.1 Medium
Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Cross-site scripting (XSS)
- CVSS 6.0 Medium
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-264
- CVSS 6.1 Medium
Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Weak cryptography or TLS
- CVSS 9.9 CriticalCritical · CVSS 9+
Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-146
- CVSS 5.8 Medium
Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 5.8 Medium
Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 7.7 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-231
- CVSS 5.4 Medium
Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
- CVSS 5.8 Medium
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-436
- CVSS 5.0 Medium
Missing authorization in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 6.0 MediumCritical · KEVKEV
Code injection in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Code injection
- CVSS 8.6 HighCritical · KEV, CVSS 7+ and EPSSKEV
Infinite loop in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 4.1 Medium
Origin validation error in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-346
- CVSS 5.0 Medium
Authentication bypass in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 8.6 High
Resource leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 6.8 Medium
Improper resource shutdown in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 6.1 Medium
Open redirect in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Open redirect
- CVSS 5.8 Medium
Authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 5.0 Medium
Authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 8.6 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-248
- CVSS 5.0 MediumCritical · KEVKEV · ransomware
Authentication bypass in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 4.4 Medium
External control of a file path in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Path traversal
- CVSS 8.6 High
Incorrect numeric conversion in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-681
- CVSS 5.3 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-332
- CVSS 5.8 Medium
Incorrect authorization in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 6.4 Medium
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-501
- CVSS 7.7 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-703