Asa 5505 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Asa 5505 Firmware

by Cisco · last CVE Oct 27, 2021

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 2High 14Medium 7Low 0

Severity

All severities23 Critical2 High14 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Asa 5505 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-3125	9.8	2%	May 6	A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the… Affected: 9.10(1.220)
CVE-2020-3187	9.1	97%	May 6	A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.6(4)
CVE-2021-34793	8.6	1%	Oct 27	A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an… Affected: 009.008(004.025)
CVE-2020-3283	8.6	2%	May 6	A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software when running on the Cisco Firepower 1000… Affected: 9.12(2.12); 9.13(0.33)
CVE-2020-3196	8.6	2%	May 6	A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 9.4(4); 9.8(4.18); 100.13(0)
CVE-2020-3191	8.6	2%	May 6	A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 9.4(1); 96.4(0.42)
CVE-2020-3189	8.6	2%	May 6	A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak… Affected: 9.9(2); 9.9(2.21); 9.9(2.52); 9.9(2.55)
CVE-2019-15256	8.6	2%	Oct 2	A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.9(2.4); 201.4(1.21)
CVE-2021-40118	7.5	1%	Oct 27	A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 009.012(004.024); 009.015(001); 009.015(001.015); 009.015(001.016); 009.016(001)
CVE-2021-40117	7.5	2%	Oct 27	A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 009.009(002.085); 009.014(002.106)
CVE-2021-34792	7.5	1%	Oct 27	A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 009.014(001.150); 099.017(001.211); 099.017(001.220); 099.017(015.050)
CVE-2021-34783	7.5	2%	Oct 27	A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an… Affected: 009.016(001); 009.016(001.025)
CVE-2020-3255	7.5	2%	May 6	A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of… Affected: 9.10(1.3)
CVE-2020-3254	7.5	2%	May 6	Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD)… Affected: 9.10(1.3)
CVE-2020-3195	7.5	2%	May 6	A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 9.12(2)
CVE-2020-3179	7.5	2%	May 6	A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 9.9(2); 101.5(1.26)
CVE-2021-40125	6.5	1%	Oct 27	A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 009.016(001.025)
CVE-2021-34794	5.3	1%	Oct 27	A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Affected: 009.014(001); 099.015(001.033); 099.016(001.216)
CVE-2021-34791	5.3	1%	Oct 27	Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: 009.008; 009.015
CVE-2021-34790	5.3	1%	Oct 27	Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower… Affected: 009.008; 009.015
CVE-2021-34787	5.3	1%	Oct 27	A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 009.009; 009.012
CVE-2020-3188	5.3	2%	May 6	A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a… Affected: 9.8(3); 101.6(1.96)
CVE-2020-3186	5.3	1%	May 6	A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured… Affected: 9.12(1.6); 201.5(23.16)