Cisco ASA 5500 vulnerabilities

52 CVEs affecting Cisco ASA 5500, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-0149, published 2013-08-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-0149, published 2010-02-19. High severity, CVSS 7.8. EPSS: 4.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series…
CVE-2011-0394, published 2011-02-25. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3…
CVE-2007-0961, published 2007-02-16. High severity, CVSS 7.8. EPSS: 3.3% chance of exploitation in the next 30 days. Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect sip" option is enabled,…
CVE-2010-4670, published 2011-01-07. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier, and Cisco PIX Security…
CVE-2010-0569, published 2010-02-19. High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.2), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.16); and…
CVE-2010-0565, published 2010-02-19. High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10), allows remote attackers to…
CVE-2010-0150, published 2010-02-19. High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.2), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.16); and…
CVE-2010-4682, published 2011-01-07. High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days. Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption) by making multiple…
CVE-2010-4680, published 2011-01-07. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been…
CVE-2010-4675, published 2011-01-07. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote…

Latest

CVE-2013-0149, published 2013-08-05. Medium severity, CVSS 5.8. EPSS: 2.5% chance of exploitation in the next 30 days. The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly…
CVE-2013-1215, published 2013-04-25. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295.
CVE-2012-6395, published 2013-01-18. Medium severity, CVSS 6.3. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial…
CVE-2012-5717, published 2013-01-18. Medium severity, CVSS 6.3. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions, which allows remote authenticated users to cause a denial of service (device…
CVE-2011-3304, published 2011-10-06. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.2(5.3), 8.0 before 8.0(5.25), 8.1 before…
CVE-2011-3303, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…
CVE-2011-3302, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…
CVE-2011-3301, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…
CVE-2011-3300, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…
CVE-2011-3299, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…