Cisco ASA 1000v Cloud Firewall vulnerabilities

3 CVEs affecting Cisco ASA 1000v Cloud Firewall, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-6395, published 2013-01-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-5419, published 2013-01-17. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliance (ASA) software 8.7.1 and 8.7.1.1 for the Cisco ASA 1000V Cloud Firewall allows remote attackers to cause a denial of service (device reload) via a malformed H.225…
CVE-2012-6395, published 2013-01-18. Medium severity, CVSS 6.3. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial…
CVE-2012-5717, published 2013-01-18. Medium severity, CVSS 6.3. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions, which allows remote authenticated users to cause a denial of service (device…