Cisco Pix vulnerabilities

14 CVEs affecting Cisco Pix, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1160, published 2009-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-3774, published 2005-11-23. Medium severity, CVSS 5.0. EPSS: 18.2% chance of exploitation in the next 30 days. Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not…
CVE-2007-2462, published 2007-05-02. High severity, CVSS 10.0. EPSS: 6.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tunneling Protocol (L2TP) or Remote Management Access, allows remote attackers to…
CVE-2007-2461, published 2007-05-02. High severity, CVSS 7.8. EPSS: 4.4% chance of exploitation in the next 30 days. The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial of service (dropped packets) via a DHCPREQUEST or DHCPINFORM message that causes…
CVE-2008-2732, published 2008-09-04. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7,…
CVE-2008-2733, published 2008-09-04. High severity, CVSS 7.1. EPSS: 3.2% chance of exploitation in the next 30 days. Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec…
CVE-2007-2464, published 2007-05-02. High severity, CVSS 7.1. EPSS: 2.9% chance of exploitation in the next 30 days. Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service…
CVE-2007-2463, published 2007-05-02. High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)17 allows remote attackers to cause a denial of service (device reload) via…
CVE-2009-1157, published 2009-04-09. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28, and 8.1 before…
CVE-2009-1159, published 2009-04-09. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQL*Net…
CVE-2009-1158, published 2009-04-09. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14,…

Latest

CVE-2009-1160, published 2009-04-09. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the…
CVE-2009-1156, published 2009-04-09. Medium severity, CVSS 5.7. EPSS: 0.7% chance of exploitation in the next 30 days. Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote…
CVE-2009-1155, published 2009-04-09. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA…
CVE-2008-3815, published 2008-10-23. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1 before 7.1(2)78, 7.2 before 7.2(4)16, 8.0 before 8.0(4)6, and 8.1…