Cisco ASA vulnerabilities

8 CVEs affecting Cisco ASA, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3389, published 2014-10-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3389, published 2014-10-10. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The VPN implementation in Cisco ASA Software 7.2 before 7.2(5.15), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12),…
CVE-2014-3386, published 2014-10-10. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8.4 before 8.4(7.15), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote…
CVE-2014-3384, published 2014-10-10. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device…
CVE-2014-3382, published 2014-10-10. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(5.50), 8.3 before 8.3(2.42), 8.4 before 8.4(7.15), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before…
CVE-2014-3383, published 2014-10-10. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted UDP packets, aka Bug ID…
CVE-2014-3388, published 2014-10-10. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9.2 before 9.2(2) allows remote attackers to cause a denial of service (device reload) via crafted DNS…
CVE-2014-3387, published 2014-10-10. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.5 before 8.5(1.21), 8.6 before 8.6(1.14), 8.7 before…
CVE-2014-3385, published 2014-10-10. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. Race condition in the Health and Performance Monitoring (HPM) for ASDM feature in Cisco ASA Software 8.3 before 8.3(2.42), 8.4 before 8.4(7.11), 8.5 before 8.5(1.19), 8.6 before 8.6(1.13), 8.7 before…