Adaptive Security Appliance Software vulnerabilities

Product

Adaptive Security Appliance Software

by Cisco · last CVE Aug 11, 2026

On CISA KEVExploited in the wildRansomware-linked

354

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities354 In the news8 Timeline

Severity mix

Critical 8High 106Medium 87Low 1

Severity

All severities354 Critical8 High106 Medium87 Low1

Exploitation

On CISA KEV14 Exploited in the wild14

Watch

Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2013-5551	–	1%	Nov 1	Cisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and management-access options are enabled, allows remote authenticated users to cause a denial… Affected: All versions, or not specified
CVE-2013-5544	–	2%	Oct 22	The VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (device reload) by sending many… Affected: All versions, or not specified
CVE-2013-5542	–	2%	Oct 21	Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.2), 8.7 before 8.7(1.8), 9.0 before 9.0(3.6), and 9.1 before 9.1(2.8) allows remote attackers to cause a denial… Affected: 9.0; 9.0(1); 9.0(2); 9.0(3); 8.7; 8.7(1.1); +14 more
CVE-2013-5515	–	1%	Oct 13	The Clientless SSL VPN feature in Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.7), 8.6.x before 8.6(1.12),… Affected: 8.0; 8.0(2); 8.0(3); 8.0(4); 8.0(5); 8.0(5.28); +34 more
CVE-2013-5513	–	2%	Oct 13	Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(7), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before… Affected: 8.2; 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); +25 more
CVE-2013-5512	–	1%	Oct 13	Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before… Affected: 8.2; 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); +27 more
CVE-2013-5511	–	2%	Oct 13	The Adaptive Security Device Management (ASDM) remote-management feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x… Affected: 8.2; 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); +34 more
CVE-2013-5510	–	1%	Oct 13	The remote-access VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6),… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2013-5509	–	2%	Oct 13	The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6) and 9.1 before 9.1(2) allows remote attackers to bypass authentication, and obtain… Affected: 9.0; 9.1
CVE-2013-5508	–	2%	Oct 13	The SQL*Net inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2013-5507	–	2%	Oct 13	The IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7), when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of… Affected: 9.1
CVE-2013-3415	–	2%	Oct 13	Cisco Adaptive Security Appliance (ASA) Software 8.4.x before 8.4(3) and 8.6.x before 8.6(1.3) does not properly manage memory upon an AnyConnect SSL VPN client disconnection,… Affected: 8.4; 8.4(1); 8.4(1.11); 8.4(2); 8.4(2.11); 8.6; +2 more
CVE-2013-3458	–	1%	Sep 8	Cisco Adaptive Security Appliances (ASA) devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to cause a denial of service (device… Affected: All versions, or not specified
CVE-2013-3463	–	2%	Aug 30	The protocol-inspection feature on Cisco Adaptive Security Appliances (ASA) devices does not properly implement the idle timeout, which allows remote attackers to cause a denial… Affected: All versions, or not specified
CVE-2013-3414	–	2%	Jul 25	Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject arbitrary web script… Affected: All versions, or not specified
CVE-2013-1215	–	0%	Apr 25	The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID… Affected: All versions, or not specified
CVE-2013-1195	–	2%	Apr 24	The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements… Affected: All versions, or not specified
CVE-2013-1199	–	1%	Apr 18	Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote… Affected: All versions, or not specified
CVE-2013-1194	–	2%	Apr 18	The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on whether invalid VPN… Affected: All versions, or not specified
CVE-2013-1193	–	2%	Apr 16	The Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly terminate sessions,… Affected: All versions, or not specified
CVE-2013-1152	–	2%	Apr 11	Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload) via a crafted field in a DNS… Affected: 9.0
CVE-2013-1151	–	1%	Apr 11	Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5),… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2013-1150	–	2%	Apr 11	The authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38),… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2013-1149	–	1%	Apr 11	Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2013-1138	–	1%	Feb 25	The NAT process on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (connections-table memory consumption) via crafted… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2012-6395	–	2%	Jan 18	Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated… Affected: 8.4
CVE-2012-5717	–	1%	Jan 18	Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions, which allows remote authenticated users to cause a denial of… Affected: 8.0; 8.0(2); 8.0(3); 8.0(4); 8.0(5); 8.0.2; +24 more
CVE-2012-5419	–	2%	Jan 17	Cisco Adaptive Security Appliance (ASA) software 8.7.1 and 8.7.1.1 for the Cisco ASA 1000V Cloud Firewall allows remote attackers to cause a denial of service (device reload) via… Affected: 8.7.1; 8.7.1.1
CVE-2012-4663	–	2%	Oct 29	The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with… Affected: 8.3(1); 8.3(2); 8.4; 8.4(1); 8.4(1.11); 8.4(2); +4 more
CVE-2012-4662	–	2%	Oct 29	The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with… Affected: 8.3(1); 8.3(2); 8.4; 8.4(1); 8.4(1.11); 8.4(2); +4 more
CVE-2012-4661	–	4%	Oct 29	Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst… Affected: 8.3(1); 8.3(2); 8.4; 8.4(1); 8.4(1.11); 8.4(2); +6 more
CVE-2012-4660	–	2%	Oct 29	The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software… Affected: 8.2; 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); +14 more
CVE-2012-4659	–	3%	Oct 29	The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst… Affected: 8.2; 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); +5 more
CVE-2012-4643	–	2%	Oct 29	The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2012-2474	–	1%	Aug 6	Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory… Affected: 8.2; 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); +13 more
CVE-2012-2472	–	2%	Aug 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes,… Affected: 8.2; 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); +12 more
CVE-2012-3058	–	2%	Jun 20	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(4.1), 8.5… Affected: 8.4; 8.4(1); 8.4(1.11); 8.4(2); 8.4(2.11); 8.5; +3 more
CVE-2012-0378	–	1%	May 3	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of service (connection limit exceeded) by… Affected: 8.0; 8.0(2); 8.0(3); 8.0(4); 8.0(5); 8.0.2; +26 more
CVE-2012-0335	–	2%	May 2	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication during attempts to cut through a firewall,… Affected: 7.2; 7.2(1); 7.2(1.22); 7.2(2); 7.2(2.5); 7.2(2.7); +34 more
CVE-2011-4006	–	1%	May 2	The ESMTP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service… Affected: 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); 8.2(4.1); +19 more
CVE-2011-3309	–	1%	May 2	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote… Affected: 8.2(1); 8.2(2); 8.2(3); 8.2(3.9); 8.2(4); 8.2(4.1); +16 more
CVE-2011-3285	–	2%	May 2	CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject… Affected: 8.0; 8.0(2); 8.0(3); 8.0(4); 8.0(5); 8.0.2; +26 more
CVE-2012-0358	–	6%	Mar 15	Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2012-0356	–	2%	Mar 15	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2012-0355	–	3%	Mar 15	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(2.11) and 8.5… Affected: 8.4; 8.4(1); 8.4(1.11); 8.4(2); 8.4(2.11); 8.5; +2 more
CVE-2012-0354	–	3%	Mar 15	The Threat Detection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with… Affected: 8.0; 8.0(2); 8.0(3); 8.0(4); 8.0(5); 8.0.2; +30 more
CVE-2012-0353	–	3%	Mar 15	The UDP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software… Affected: 8.0; 8.0(2); 8.0(3); 8.0(4); 8.0(5); 8.0.2; +26 more
CVE-2011-2060	–	0%	Oct 22	The platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 before 8.2(5.3), 8.3 before 8.3(2.20), and 8.4 before 8.4(2.1) does not… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2011-3304	–	3%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.2(5.3), 8.0 before… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2011-3303	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more