Cisco ASA With Firepower Services vulnerabilities

3 CVEs affecting Cisco ASA With Firepower Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1369, published 2016-05-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0678, published 2015-04-11. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of…
CVE-2016-1369, published 2016-05-05. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. The Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module for Cisco ASA with FirePOWER Services 5.3.1 through 6.0.0 misconfigures kernel logging, which allows…
CVE-2016-1345, published 2016-04-01. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka…