Cisco Application Services Engine vulnerabilities

4 CVEs affecting Cisco Application Services Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1396, published 2021-02-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1393, published 2021-02-24. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific…
CVE-2021-1396, published 2021-02-24. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific…
CVE-2020-3333, published 2020-06-03. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to…
CVE-2020-3335, published 2020-06-03. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an affected device. The…