Cisco Adaptive Security Appliance 5500 vulnerabilities

12 CVEs affecting Cisco Adaptive Security Appliance 5500, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-4455, published 2009-12-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-2732, published 2008-09-04. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7,…
CVE-2008-2733, published 2008-09-04. High severity, CVSS 7.1. EPSS: 3.2% chance of exploitation in the next 30 days. Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec…
CVE-2008-2734, published 2008-09-04. High severity, CVSS 7.1. EPSS: 2.8% chance of exploitation in the next 30 days. Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL…
CVE-2008-2735, published 2008-09-04. High severity, CVSS 7.1. EPSS: 2.8% chance of exploitation in the next 30 days. The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5, when configured as a clientless SSL VPN endpoint, does not properly process URIs,…
CVE-2009-1157, published 2009-04-09. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28, and 8.1 before…
CVE-2008-2736, published 2008-09-04. High severity, CVSS 7.1. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0(3)15, 8.0(3)16, 8.1(1)4, and 8.1(1)5, when configured as a clientless SSL VPN endpoint, allows remote attackers…
CVE-2009-1159, published 2009-04-09. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQL*Net…
CVE-2009-1158, published 2009-04-09. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14,…
CVE-2009-1155, published 2009-04-09. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA…
CVE-2009-4455, published 2009-12-29. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might…

Latest

CVE-2009-1160, published 2009-04-09. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the…
CVE-2009-1156, published 2009-04-09. Medium severity, CVSS 5.7. EPSS: 0.7% chance of exploitation in the next 30 days. Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote…