Cisco Adaptive Security Appliance vulnerabilities

63 CVEs affecting Cisco Adaptive Security Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20107, published 2023-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-1220, published 2009-04-01. Medium severity, CVSS 4.3. EPSS: 9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and…
CVE-2009-1201, published 2009-06-25. Medium severity, CVSS 4.3. EPSS: 8.8% chance of exploitation in the next 30 days. Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote…
CVE-2014-0653, published 2014-01-08. Medium severity, CVSS 4.3. EPSS: 6.9% chance of exploitation in the next 30 days. The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe…
CVE-2009-2631, published 2009-12-04. Medium severity, CVSS 6.8. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper…
CVE-2019-15992, published 2020-09-23. High severity, CVSS 7.2. EPSS: 4.1% chance of exploitation in the next 30 days. A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2020-3304, published 2020-10-21. High severity, CVSS 8.6. EPSS: 3.9% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an…
CVE-2009-1203, published 2009-06-25. Medium severity, CVSS 6.0. EPSS: 3.8% chance of exploitation in the next 30 days. WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for…
CVE-2011-0394, published 2011-02-25. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3…
CVE-2020-3554, published 2020-10-21. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2011-0395, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco…

Latest

CVE-2023-20107, published 2023-03-23. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2022-20795, published 2022-04-21. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2021-1573, published 2022-01-11. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2021-40118, published 2021-10-27. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2021-40117, published 2021-10-27. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2021-34793, published 2021-10-27. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated,…
CVE-2021-34791, published 2021-10-27. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense…
CVE-2021-34790, published 2021-10-27. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense…
CVE-2021-34787, published 2021-10-27. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2020-3599, published 2020-10-21. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)…