Cisco Firewall Services Module vulnerabilities

29 CVEs affecting Cisco Firewall Services Module, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1195, published 2013-04-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0112, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote…
CVE-2006-0515, published 2006-05-09. High severity, CVSS 7.5. EPSS: 9.8% chance of exploitation in the next 30 days. Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to…
CVE-2004-0079, published 2004-11-23. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null…
CVE-2004-0081, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test…
CVE-2005-3669, published 2005-11-18. Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via…
CVE-2011-0394, published 2011-02-25. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3…
CVE-2007-5570, published 2007-10-18. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. Cisco Firewall Services Module (FWSM) 3.2(1), and 3.1(5) and earlier, allows remote attackers to cause a denial of service (device reload) via a crafted HTTPS request, aka CSCsi77844.
CVE-2009-0638, published 2009-08-21. High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days. The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a…
CVE-2007-0962, published 2007-02-16. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows…
CVE-2007-5568, published 2007-10-18. High severity, CVSS 7.1. EPSS: 2.2% chance of exploitation in the next 30 days. Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module (FWSM) 3.1(5) and earlier, allow remote attackers to cause a denial of service (device reload) via a…

Latest

CVE-2013-1195, published 2013-04-24. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements for the time-range…
CVE-2013-1193, published 2013-04-16. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly terminate sessions, which allows remote…
CVE-2012-0356, published 2012-03-15. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before…
CVE-2010-2821, published 2010-08-09. High severity, CVSS 7.1. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability on the Cisco Firewall Services Module (FWSM) with software 3.2 before 3.2(17.2), 4.0 before 4.0(11.1), and 4.1 before 4.1(1.2) for Catalyst 6500 series switches and 7600…
CVE-2010-2820, published 2010-08-09. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before…
CVE-2010-2819, published 2010-08-09. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before…
CVE-2010-2818, published 2010-08-09. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before…
CVE-2010-0151, published 2010-02-19. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to…