Cisco Firewall Services Module Software vulnerabilities

19 CVEs affecting Cisco Firewall Services Module Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0710, published 2014-02-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0394, published 2011-02-25. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3…
CVE-2012-0356, published 2012-03-15. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before…
CVE-2011-3296, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service…
CVE-2011-3303, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…
CVE-2011-3302, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…
CVE-2011-3301, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…
CVE-2011-3300, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…
CVE-2011-3299, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0…
CVE-2013-5508, published 2013-10-13. High severity, CVSS 7.1. EPSS: 1.5% chance of exploitation in the next 30 days. The SQL*Net inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18),…
CVE-2011-3297, published 2011-10-06. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote…

Latest

CVE-2014-0710, published 2014-02-22. High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days. Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows remote attackers to cause a denial of service…
CVE-2013-5506, published 2013-10-13. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or…
CVE-2013-1155, published 2013-04-11. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of…
CVE-2013-1149, published 2013-04-11. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before 8.4(4.11), 8.6 before…