Cisco ASA Cx Context-Aware Security Software vulnerabilities

5 CVEs affecting Cisco ASA Cx Context-Aware Security Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-9225, published 2017-02-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-9225, published 2017-02-01. High severity, CVSS 8.6. EPSS: 2.7% chance of exploitation in the next 30 days. A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security module could allow an unauthenticated, remote attacker to cause the CX…
CVE-2016-1301, published 2016-02-07. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to…
CVE-2015-0678, published 2015-04-11. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of…
CVE-2015-6344, published 2015-10-30. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypass intended access restrictions and obtain sensitive user…
CVE-2013-1203, published 2013-06-18. Medium severity, CVSS 5.4. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service (device reload) via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive…