Cisco 5500 Series Adaptive Security Appliance vulnerabilities

51 CVEs affecting Cisco 5500 Series Adaptive Security Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1215, published 2013-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0358, published 2012-03-15. High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days. Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with…
CVE-2012-4661, published 2012-10-29. High severity, CVSS 9.0. EPSS: 4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,…
CVE-2011-0394, published 2011-02-25. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3…
CVE-2010-4670, published 2011-01-07. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco PIX Security…
CVE-2010-4682, published 2011-01-07. High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days. Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption) by making multiple…
CVE-2010-4680, published 2011-01-07. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been…
CVE-2010-4675, published 2011-01-07. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote…
CVE-2012-0355, published 2012-03-15. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(2.11) and 8.5 before 8.5(1.4)…
CVE-2011-0393, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12), 7.1 and 7.2 before 7.2(5.2), 8.0 before 8.0(5.21), 8.1 before 8.1(2.49), 8.2 before 8.2(3.6), and 8.3…
CVE-2010-4692, published 2011-01-07. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) via a large…

Latest

CVE-2013-1215, published 2013-04-25. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295.
CVE-2012-5415, published 2013-04-16. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections,…
CVE-2013-1149, published 2013-04-11. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before 8.4(4.11), 8.6 before…
CVE-2012-4663, published 2012-10-29. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before…
CVE-2012-4662, published 2012-10-29. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before…
CVE-2012-4660, published 2012-10-29. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before…
CVE-2012-4659, published 2012-10-29. High severity, CVSS 7.1. EPSS: 2.6% chance of exploitation in the next 30 days. The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,…
CVE-2012-4643, published 2012-10-29. High severity, CVSS 7.1. EPSS: 1.5% chance of exploitation in the next 30 days. The DHCP server on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 before 7.2(5.8), 7.1…
CVE-2012-2474, published 2012-08-06. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory consumption and blank…