5500 Series Adaptive Security Appliance vulnerabilities

Product

5500 Series Adaptive Security Appliance

by Cisco · last CVE Apr 25, 2013

CVEs

On KEV

–

Max CVSS

New 30D

Vulnerabilities51 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities51 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add 5500 Series Adaptive Security Appliance to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2013-1215	–	0%	Apr 25	The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID… Affected: All versions, or not specified
CVE-2012-5415	–	1%	Apr 16	Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple… Affected: 7.2
CVE-2013-1149	–	1%	Apr 11	Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before… Affected: All versions, or not specified
CVE-2012-4663	–	2%	Oct 29	The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with… Affected: All versions, or not specified
CVE-2012-4662	–	2%	Oct 29	The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with… Affected: All versions, or not specified
CVE-2012-4661	–	4%	Oct 29	Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst… Affected: All versions, or not specified
CVE-2012-4660	–	2%	Oct 29	The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software… Affected: All versions, or not specified
CVE-2012-4659	–	3%	Oct 29	The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst… Affected: All versions, or not specified
CVE-2012-4643	–	2%	Oct 29	The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0… Affected: All versions, or not specified
CVE-2012-2474	–	1%	Aug 6	Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory… Affected: All versions, or not specified
CVE-2012-2472	–	2%	Aug 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes,… Affected: All versions, or not specified
CVE-2012-3058	–	2%	Jun 20	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(4.1), 8.5… Affected: All versions, or not specified
CVE-2012-0378	–	1%	May 3	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by… Affected: All versions, or not specified
CVE-2012-0335	–	2%	May 2	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall,… Affected: All versions, or not specified
CVE-2011-4006	–	1%	May 2	The ESMTP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service… Affected: All versions, or not specified
CVE-2011-3309	–	1%	May 2	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote… Affected: All versions, or not specified
CVE-2011-3285	–	2%	May 2	CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject… Affected: All versions, or not specified
CVE-2012-0358	–	6%	Mar 15	Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500… Affected: All versions, or not specified
CVE-2012-0356	–	2%	Mar 15	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before… Affected: All versions, or not specified
CVE-2012-0355	–	3%	Mar 15	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(2.11) and 8.5… Affected: All versions, or not specified
CVE-2012-0354	–	3%	Mar 15	The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with… Affected: All versions, or not specified
CVE-2012-0353	–	3%	Mar 15	The UDP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software… Affected: All versions, or not specified
CVE-2011-2060	–	0%	Oct 22	The platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 before 8.2(5.3), 8.3 before 8.3(2.20), and 8.4 before 8.4(2.1) does not… Affected: All versions, or not specified
CVE-2011-3304	–	3%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.2(5.3), 8.0 before… Affected: All versions, or not specified
CVE-2011-3303	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: All versions, or not specified
CVE-2011-3302	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: All versions, or not specified
CVE-2011-3301	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: All versions, or not specified
CVE-2011-3300	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: All versions, or not specified
CVE-2011-3299	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: All versions, or not specified
CVE-2011-3298	–	1%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: All versions, or not specified
CVE-2011-0394	–	3%	Feb 25	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2… Affected: All versions, or not specified
CVE-2011-0393	–	3%	Feb 25	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12), 7.1 and 7.2 before 7.2(5.2), 8.0 before 8.0(5.21), 8.1 before 8.1(2.49), 8.2… Affected: All versions, or not specified
CVE-2011-0379	–	2%	Feb 25	Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,… Affected: All versions, or not specified
CVE-2010-4692	–	3%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device… Affected: All versions, or not specified
CVE-2010-4691	–	3%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device… Affected: All versions, or not specified
CVE-2010-4690	–	2%	Jan 7	The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests… Affected: All versions, or not specified
CVE-2010-4689	–	3%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL behavior after a migration, which allows remote attackers to… Affected: All versions, or not specified
CVE-2010-4688	–	3%	Jan 7	Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to… Affected: All versions, or not specified
CVE-2009-5037	–	2%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (ASDM syslog outage) via a long URL,… Affected: All versions, or not specified
CVE-2010-4670	–	3%	Jan 7	The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco… Affected: All versions, or not specified
CVE-2010-4682	–	3%	Jan 7	Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption)… Affected: All versions, or not specified
CVE-2010-4681	–	2%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors… Affected: All versions, or not specified
CVE-2010-4680	–	3%	Jan 7	The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file… Affected: All versions, or not specified
CVE-2010-4679	–	1%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Protocol (OCSP) connection failures,… Affected: All versions, or not specified
CVE-2010-4678	–	2%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote… Affected: All versions, or not specified
CVE-2010-4677	–	2%	Jan 7	emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (daemon crash) via a request… Affected: All versions, or not specified
CVE-2010-4676	–	2%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote authenticated users to cause a denial of… Affected: All versions, or not specified
CVE-2010-4675	–	3%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted,… Affected: All versions, or not specified
CVE-2010-4674	–	3%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allows remote attackers to cause a denial of service… Affected: All versions, or not specified
CVE-2010-4673	–	3%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allow remote attackers to cause a denial of service via a flood of packets, aka Bug… Affected: All versions, or not specified