CVE-2019-1945: Cisco Adaptive Security Appliance Software

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these vulnerabilities, see the Details section of this security advisory.

Affected products

• Cisco Adaptive Security Appliance Software: before 9.4.4.37 (fixed in 9.4.4.37)

Published 2019-08-07. Last modified 2026-06-17.