Cisco Adaptive Security Appliance Device Manager vulnerabilities

3 CVEs affecting Cisco Adaptive Security Appliance Device Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1715, published 2019-05-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0397, published 2007-01-20. Medium severity, CVSS 6.4. EPSS: 2.9% chance of exploitation in the next 30 days. The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS certificates or SSH public…
CVE-2013-1192, published 2013-04-25. High severity, CVSS 9.3. EPSS: 2.4% chance of exploitation in the next 30 days. The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows…
CVE-2019-1715, published 2019-05-03. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower…