CVE-2014-3392: Cisco Adaptive Security Appliance Software

High severity, CVSS 8.3. EPSS: 1.7% chance of exploitation in the next 30 days.

The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows remote attackers to obtain sensitive information from process memory or modify memory contents via crafted parameters, aka Bug ID CSCuq29136.

Affected products

• Cisco Adaptive Security Appliance Software: version 8.2 only; version 8.2.0.45 only; version 8.2.1 only; version 8.2.1.1 only; version 8.2.2 only; version 8.2.2.10 only; …

Published 2014-10-10. Last modified 2026-06-17.