Cisco ASA 5580 vulnerabilities

21 CVEs affecting Cisco ASA 5580, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0396, published 2011-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-7257, published 2010-06-29. Medium severity, CVSS 4.3. EPSS: 11.6% chance of exploitation in the next 30 days. CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary…
CVE-2011-0395, published 2011-02-25. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco…
CVE-2009-4912, published 2010-06-29. High severity, CVSS 10.0. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote…
CVE-2010-2817, published 2010-08-09. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5), 8.0 before…
CVE-2010-2816, published 2010-08-09. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before…
CVE-2010-2815, published 2010-08-09. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15),…
CVE-2010-2814, published 2010-08-09. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15),…
CVE-2009-4919, published 2010-06-29. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to have an unspecified impact via long IKE attributes, aka Bug ID…
CVE-2009-4913, published 2010-06-29. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The IPv6 implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) exposes IP services on the "far side of the box," which might allow remote…
CVE-2011-0396, published 2011-02-25. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA)…

Latest

CVE-2009-4923, published 2010-06-29. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service…
CVE-2009-4922, published 2010-06-29. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (traceback) by…
CVE-2009-4921, published 2010-06-29. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (traceback) via malformed TCP packets, aka Bug ID…
CVE-2009-4920, published 2010-06-29. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in CTM on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software 8.1(2) allows remote attackers to cause a denial of service (watchdog traceback) via a…