Pix Firewall Software vulnerabilities | LiveThreat CVE Feed

Product

Pix Firewall Software

by Cisco · last CVE Aug 18, 2016

On CISA KEVExploited in the wild

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 0High 1Medium 0Low 0

Severity

All severities25 Critical0 High1 Medium0 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Pix Firewall Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-6366 In wildKEV	8.8	88%	Aug 18	Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Affected: All versions, or not specified
CVE-2013-0149	–	2%	Aug 5	The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488… Affected: 7.0; 7.1; 7.2; 8.0(2); 9.0; 9.1
CVE-2008-0028	–	2%	Jan 23	Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL)… Affected: before 7.2\(3\)6; 8.0(3)
CVE-2007-0962	–	2%	Feb 16	Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http"… Affected: 7.0; 7.1
CVE-2007-0959	–	2%	Feb 16	Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device… Affected: 7.2(2)
CVE-2007-0960	–	3%	Feb 16	Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the LOCAL authentication method, allows remote authenticated users… Affected: 7.2(2)
CVE-2007-0961	–	3%	Feb 16	Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect… Affected: 6.3; 7.0; 7.1; 7.2
CVE-2006-4312	–	0%	Aug 23	Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module… Affected: 6.3
CVE-2006-4194	–	2%	Aug 17	Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving… Affected: 6.3
CVE-2006-3906	–	7%	Jul 27	Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service… Affected: 2.7; 3.0; 3.1; 4.0; 4.1(6); 4.1(6b); +34 more
CVE-2006-0515	–	10%	May 9	Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows… Affected: 2.7; 3.0; 3.1; 4.0; 4.1(6); 4.1(6b); +34 more
CVE-2005-4499	–	3%	Dec 22	The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal… Affected: 2.7; 3.0; 3.1; 4.0; 4.1(6); 4.1(6b); +34 more
CVE-2005-3669	–	5%	Nov 18	Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service… Affected: 2.7; 3.0; 3.1; 4.0; 4.1(6); 4.1(6b); +34 more
CVE-2003-1004	–	1%	Jan 5	Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service (dropped IPSec tunnel connection) via an IKE Phase I… Affected: 6.2; 6.2(1); 6.2(2); 6.2(3); 6.2(3.100)
CVE-2003-1003	–	1%	Jan 5	Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set Affected: 5.0; 5.1; 5.1(4); 5.1(4.206); 5.2; 5.2(1); +31 more
CVE-2003-1109	–	7%	Dec 31	The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to… Affected: 5.2(1); 5.2(2); 5.2(3.210); 5.2(5); 5.2(6); 5.2(7); +10 more
CVE-2003-0851	–	6%	Dec 1	OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences Affected: 6.0; 6.0(1); 6.0(2); 6.0(3); 6.0(4); 6.0(4.101); +12 more
CVE-2002-2139	–	1%	Dec 31	Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a… Affected: 6.0; 6.0(1); 6.0(2); 6.0(3); 6.1; 6.1(2); +1 more
CVE-2002-2140	–	2%	Dec 31	Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic… Affected: 5.2; 5.2(1); 5.2(2); 5.2(3); 5.2(4); 5.2(5); +13 more
CVE-2002-1024	–	3%	Oct 4	Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH… Affected: 5.2; 5.3; 6.0; 6.1; 6.2
CVE-2000-1022	–	7%	Dec 11	The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted… Affected: 4.2(1); 4.2(2); 4.2(5); 4.3; 4.4(4); 5.0; +2 more
CVE-2000-1027	–	4%	Dec 11	Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real… Affected: 5.2
CVE-2000-0150	–	2%	Feb 12	Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid… Affected: 4.1(6); 4.1(6b); 4.2(1); 4.2(2); 4.3; 4.4(4); +1 more
CVE-1999-0158	–	1%	Aug 31	Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known Affected: 4.1(6); 4.2(1)
CVE-1999-0157	–	1%	Aug 18	Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service Affected: 4.2(1)