Adaptive Security Appliance Software vulnerabilities

Product

Adaptive Security Appliance Software

by Cisco · last CVE Aug 11, 2026

On CISA KEVExploited in the wildRansomware-linked

354

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities354 In the news8 Timeline

Severity mix

Critical 8High 106Medium 87Low 1

Severity

All severities354 Critical8 High106 Medium87 Low1

Exploitation

On CISA KEV14 Exploited in the wild14

Watch

Add Adaptive Security Appliance Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2011-3302	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2011-3301	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2011-3300	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2011-3299	–	2%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2011-3298	–	1%	Oct 6	Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2… Affected: 7.0; 7.0(0); 7.0(1); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2011-0396	–	1%	Feb 25	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a… Affected: 8.0; 8.3(1)
CVE-2011-0395	–	3%	Feb 25	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP… Affected: 8.0; 8.3(1)
CVE-2011-0394	–	3%	Feb 25	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2… Affected: through 8.3\(1\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2011-0379	–	2%	Feb 25	Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,… Affected: 1.6.0
CVE-2011-0393	–	3%	Feb 25	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12), 7.1 and 7.2 before 7.2(5.2), 8.0 before 8.0(5.21), 8.1 before 8.1(2.49), 8.2… Affected: through 8.3\(1\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4691	–	3%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device… Affected: through 8.3\(1\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4692	–	3%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device… Affected: through 8.3\(1\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4690	–	2%	Jan 7	The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests… Affected: through 8.3\(1\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4688	–	3%	Jan 7	Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to… Affected: through 8.3\(1\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4689	–	3%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL behavior after a migration, which allows remote attackers to… Affected: through 8.3\(1\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4673	–	3%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allow remote attackers to cause a denial of service via a flood of packets, aka Bug… Affected: through 8.2\(4\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2009-5037	–	2%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (ASDM syslog outage) via a long URL,… Affected: through 8.2\(2\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4670	–	3%	Jan 7	The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco… Affected: through 8.2\(3\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4672	–	3%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier allow remote attackers to cause a denial of service (block exhaustion) via EIGRP… Affected: through 8.2\(3\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4674	–	3%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allows remote attackers to cause a denial of service… Affected: through 8.2\(4\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4675	–	3%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted,… Affected: through 8.2\(2\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4676	–	2%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote authenticated users to cause a denial of… Affected: through 8.2\(2\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4677	–	2%	Jan 7	emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (daemon crash) via a request… Affected: through 8.2\(2\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4678	–	2%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote… Affected: through 8.2\(2\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4679	–	1%	Jan 7	Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly handle Online Certificate Status Protocol (OCSP) connection failures,… Affected: through 8.2\(2\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4680	–	3%	Jan 7	The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file… Affected: through 8.2\(2\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4681	–	2%	Jan 7	Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors… Affected: through 8.2\(2\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-4682	–	3%	Jan 7	Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption)… Affected: through 8.2\(2\); 7.0; 7.0(0); 7.0(2); 7.0(4); 7.0(5); +34 more
CVE-2010-2817	–	3%	Aug 9	Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5),… Affected: 7.0; 7.0(4); 7.0(5); 7.0(5.2); 7.0(6.7); 7.0.1.4; +21 more
CVE-2010-2816	–	3%	Aug 9	Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45),… Affected: 8.0
CVE-2010-2815	–	3%	Aug 9	Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0… Affected: 7.2(1); 7.2(1.22); 7.2(2); 7.2(2.5); 7.2(2.7); 7.2(2.8); +8 more
CVE-2010-2814	–	3%	Aug 9	Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0… Affected: 7.2(1); 7.2(1.22); 7.2(2); 7.2(2.5); 7.2(2.7); 7.2(2.8); +8 more
CVE-2010-1581	–	3%	Aug 9	Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0… Affected: 7.2(1); 7.2(1.22); 7.2(2); 7.2(2.5); 7.2(2.7); 7.2(2.8); +8 more
CVE-2010-1580	–	2%	Aug 9	Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19),… Affected: 7.2(1); 7.2(1.22); 7.2(2); 7.2(2.5); 7.2(2.7); 7.2(2.8); +8 more
CVE-2010-1579	–	2%	Aug 9	Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19),… Affected: 7.2(1); 7.2(1.22); 7.2(2); 7.2(2.5); 7.2(2.7); 7.2(2.8); +8 more
CVE-2010-1578	–	2%	Aug 9	Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19),… Affected: 7.2(1); 7.2(1.22); 7.2(2); 7.2(2.5); 7.2(2.7); 7.2(2.8); +8 more
CVE-2010-0440	–	5%	Feb 3	Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1),… Affected: 8.1 before 8.1\(2.7\)
CVE-2008-2058	–	3%	Jun 4	Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(3)2 and 8.0.x before 8.0(2)17 allows remote attackers to cause a denial of service… Affected: 7.2.2; 8.0
CVE-2008-2059	–	3%	Jun 4	Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plane ACLs for the device via unknown… Affected: 8.0
CVE-2008-2057	–	3%	Jun 4	The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4), 8.0.x before 8.0(3)10, and 8.1.x… Affected: 7.2.2; 8.0
CVE-2008-2056	–	2%	Jun 4	Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1 allows remote attackers to cause a denial of service (device… Affected: 8.0
CVE-2008-2055	–	2%	Jun 4	Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3)10 allows remote attackers to cause a… Affected: 7.1; 7.2.2; 8.0
CVE-2008-0028	–	2%	Jan 23	Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL)… Affected: before 7.2\(3\)6; 8.0(3)
CVE-2007-5569	–	2%	Oct 18	Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a… Affected: 7.1
CVE-2007-5568	–	2%	Oct 18	Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module (FWSM) 3.1(5) and earlier, allow remote attackers to cause a denial of service… Affected: 7.0; 7.0(4); 7.0(5); 7.0(5.2); 7.0(6.7); 7.0.1.4; +18 more
CVE-2007-2463	–	3%	May 2	Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17 allows remote attackers to cause a denial of service… Affected: through 7.2.2; 7.1
CVE-2007-2464	–	3%	May 2	Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a… Affected: through 7.2.2; 7.1
CVE-2007-2461	–	4%	May 2	The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial of service (dropped packets) via a DHCPREQUEST or DHCPINFORM… Affected: 7.2.2
CVE-2007-2462	–	6%	May 2	Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows… Affected: through 7.2.2; 7.1
CVE-2006-3906	–	7%	Jul 27	Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service… Affected: 7.0; 7.0(4); 7.0(5); 7.0.1.4; 7.0.4.3; 7.1(2)