Cisco Pix Firewall vulnerabilities

13 CVEs affecting Cisco Pix Firewall, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-3906, published 2006-07-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0112, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote…
CVE-2006-0515, published 2006-05-09. High severity, CVSS 7.5. EPSS: 9.8% chance of exploitation in the next 30 days. Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to…
CVE-2004-0079, published 2004-11-23. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null…
CVE-2000-0613, published 2000-03-20. Medium severity, CVSS 5.0. EPSS: 9.2% chance of exploitation in the next 30 days. Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections.
CVE-2004-0081, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test…
CVE-2006-3906, published 2006-07-27. Medium severity, CVSS 5.0. EPSS: 6.9% chance of exploitation in the next 30 days. Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via…
CVE-2003-0851, published 2003-12-01. Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days. OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
CVE-2005-3669, published 2005-11-18. Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via…
CVE-2005-4499, published 2005-12-22. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that…
CVE-1999-1582, published 1998-07-15. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause…

Latest

CVE-2003-1004, published 2004-01-05. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service (dropped IPSec tunnel connection) via an IKE Phase I negotiation request…
CVE-2003-1003, published 2004-01-05. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.