Cisco ASA 5510 Firmware vulnerabilities

14 CVEs affecting Cisco ASA 5510 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3283, published 2020-05-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3187, published 2020-05-06. Critical severity, CVSS 9.1. EPSS: 96.6% chance of exploitation in the next 30 days. A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2020-3125, published 2020-05-06. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution…
CVE-2020-3283, published 2020-05-06. High severity, CVSS 8.6. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software when running on the Cisco Firepower 1000 Series platform…
CVE-2020-3179, published 2020-05-06. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a…
CVE-2019-15256, published 2019-10-02. High severity, CVSS 8.6. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2020-3254, published 2020-05-06. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an…
CVE-2020-3196, published 2020-05-06. High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2020-3195, published 2020-05-06. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2020-3191, published 2020-05-06. High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2020-3189, published 2020-05-06. High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete…

Latest

CVE-2020-3255, published 2020-05-06. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on…
CVE-2020-3188, published 2020-05-06. Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote…
CVE-2020-3186, published 2020-05-06. Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management…