AS
Network Security
Adaptive Security Appliance
On CISA KEVExploited in the wild
73
CVEs
2
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 22Medium 10Low 0
Watch
Add Adaptive Security Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20353 In wildKEV | 8.6 | Apr 24 | Cisco ASA and FTD Denial of Service Vulnerability Affected: 9.8.1 through 9.8.4.48; 9.12.1 through 9.12.4.65; 9.14.1 before 9.14.4.23; 9.15.1 through 9.15.1.21; 9.16.1 through 9.16.4.55; 9.17.1 through 9.17.1.33; +3 more |
| CVE-2024-20359 In wildKEV | 6.0 | Apr 24 | Cisco ASA and FTD Privilege Escalation Vulnerability Affected: 9.12.1 through 9.12.4.65; 9.14.1 before 9.14.4.23; 9.15.1 through 9.15.1.21; 9.16.1 through 9.16.4.55; 9.17.1 through 9.17.1.33; 9.18.1 through 9.18.4.8; +3 more |
| CVE-2021-34793 | 8.6 | Oct 27 | A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an… Affected: before 9.8.4.40 |
| CVE-2020-3572 | 8.6 | Oct 21 | A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.6 |
| CVE-2020-3436 | 8.6 | Oct 21 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 9.6.4.45 |
| CVE-2020-3304 | 8.6 | Oct 21 | A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 9.6.4.45 |
| CVE-2023-20107 | 7.5 | Mar 23 | A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco… Affected: before 9.12.1 |
| CVE-2022-20795 | 7.5 | Apr 21 | A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: through 9.16.3 |
| CVE-2021-1573 | 7.5 | Jan 11 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: through 9.7 |
| CVE-2021-40118 | 7.5 | Oct 27 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.8.4.40 |
| CVE-2021-40117 | 7.5 | Oct 27 | A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.8.4.40 |
| CVE-2020-3555 | 7.5 | Oct 21 | A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.6.4.43 |
| CVE-2020-3554 | 7.5 | Oct 21 | A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.12.4.3 |
| CVE-2020-3529 | 7.5 | Oct 21 | A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.6.4.45 |
| CVE-2020-3528 | 7.5 | Oct 21 | A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.6 |
| CVE-2020-3306 | 7.5 | May 6 | A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 9.6.4.34 |
| CVE-2020-3305 | 7.5 | May 6 | A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)… Affected: before 9.6.4.36 |
| CVE-2020-3303 | 7.5 | May 6 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: before 9.6.4.36 |
| CVE-2019-12698 | 7.5 | Oct 2 | A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 9.6.4.31 |
| CVE-2019-12678 | 7.5 | Oct 2 | A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 9.4.4.37 |
| CVE-2019-12673 | 7.5 | Oct 2 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 9.6.4.34 |
| CVE-2019-12676 | 7.4 | Oct 2 | A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: before 9.6.4.34 |
| CVE-2019-15992 | 7.2 | Sep 23 | A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: before 9.6.4.36 |
| CVE-2020-3599 | 6.1 | Oct 21 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: before 9.6.4.45 |
| CVE-2019-12695 | 6.1 | Oct 2 | A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.6.4.31 |
| CVE-2017-12265 | 6.1 | Oct 5 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: All versions, or not specified |
| CVE-2021-34791 | 5.3 | Oct 27 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: before 9.8.4.40 |
| CVE-2021-34790 | 5.3 | Oct 27 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: before 9.8.4.40 |
| CVE-2021-34787 | 5.3 | Oct 27 | A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 9.8.4.40 |
| CVE-2020-3564 | 5.3 | Oct 21 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 9.6 |
| CVE-2019-12693 | 4.9 | Oct 2 | A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service… Affected: before 9.6.4.30 |
| CVE-2020-3561 | 4.7 | Oct 21 | A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 9.6.4.35 |
| CVE-2014-3389 | – | Oct 10 | The VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24),… Affected: 7.2.5; 7.2.5.10; 8.2.5; 8.2.5.13; 8.2.5.22; 8.2.5.26; +20 more |
| CVE-2014-3388 | – | Oct 10 | The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9.2 before 9.2(2) allows remote attackers to cause a denial of service (device… Affected: 9.0; 9.1; 9.2 |
| CVE-2014-3387 | – | Oct 10 | The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.5 before 8.5(1.21), 8.6 before… Affected: 7.2.5; 7.2.5.10; 8.2.5; 8.2.5.13; 8.2.5.22; 8.2.5.26; +21 more |
| CVE-2014-3386 | – | Oct 10 | The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8.4 before 8.4(7.15), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before… Affected: 8.2.5; 8.2.5.13; 8.2.5.22; 8.2.5.26; 8.2.5.33; 8.2.5.41; +14 more |
| CVE-2014-3385 | – | Oct 10 | Race condition in the Health and Performance Monitoring (HPM) for ASDM feature in Cisco ASA Software 8.3 before 8.3(2.42), 8.4 before 8.4(7.11), 8.5 before 8.5(1.19), 8.6 before… Affected: 8.3; 8.3.2.25; 8.4; 8.4.1; 8.4.2; 8.4.3; +10 more |
| CVE-2014-3384 | – | Oct 10 | The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial… Affected: 8.4; 8.4.1; 8.4.2; 8.4.3; 8.4.4; 8.6; +4 more |
| CVE-2014-3383 | – | Oct 10 | The IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted UDP packets,… Affected: 9.1; 9.1.5 |
| CVE-2014-3382 | – | Oct 10 | The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 before 8.5(1.21), 8.6 before… Affected: 7.2.5; 7.2.5.10; 8.2.5; 8.2.5.13; 8.2.5.22; 8.2.5.26; +21 more |
| CVE-2014-0655 | – | Jan 8 | The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack… Affected: All versions, or not specified |
| CVE-2014-0653 | – | Jan 8 | The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted… Affected: All versions, or not specified |
| CVE-2013-6696 | – | Dec 2 | Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service… Affected: All versions, or not specified |
| CVE-2013-3463 | – | Aug 30 | The protocol-inspection feature on Cisco Adaptive Security Appliances (ASA) devices does not properly implement the idle timeout, which allows remote attackers to cause a denial… Affected: All versions, or not specified |
| CVE-2013-3414 | – | Jul 25 | Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject arbitrary web script… Affected: All versions, or not specified |
| CVE-2013-3382 | – | Jun 26 | The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive Security Appliances (ASA)… Affected: 9.1.1; 9.1.1.1; 9.1.1.2; 9.1.1.3; 9.1.1.4; 9.1.1.5; +15 more |
| CVE-2013-1199 | – | Apr 18 | Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote… Affected: All versions, or not specified |
| CVE-2013-1194 | – | Apr 18 | The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on whether invalid VPN… Affected: All versions, or not specified |
| CVE-2012-5415 | – | Apr 16 | Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple… Affected: All versions, or not specified |
| CVE-2013-1152 | – | Apr 11 | Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload) via a crafted field in a DNS… Affected: All versions, or not specified |