Cisco ASA 5585-X Firmware vulnerabilities

24 CVEs affecting Cisco ASA 5585-X Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-20829, published 2022-06-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3187, published 2020-05-06. Critical severity, CVSS 9.1. EPSS: 96.6% chance of exploitation in the next 30 days. A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2022-20829, published 2022-06-24. High severity, CVSS 7.2. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software could allow an…
CVE-2020-3125, published 2020-05-06. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution…
CVE-2020-3283, published 2020-05-06. High severity, CVSS 8.6. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software when running on the Cisco Firepower 1000 Series platform…
CVE-2020-3179, published 2020-05-06. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a…
CVE-2020-3254, published 2020-05-06. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an…
CVE-2020-3196, published 2020-05-06. High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2020-3195, published 2020-05-06. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2020-3191, published 2020-05-06. High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2020-3189, published 2020-05-06. High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete…

Latest

CVE-2021-40125, published 2021-10-27. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
CVE-2021-40118, published 2021-10-27. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2021-40117, published 2021-10-27. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2021-34794, published 2021-10-27. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
CVE-2021-34793, published 2021-10-27. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated,…
CVE-2021-34792, published 2021-10-27. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a…
CVE-2021-34791, published 2021-10-27. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense…
CVE-2021-34790, published 2021-10-27. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense…
CVE-2021-34787, published 2021-10-27. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…