Cisco Pix Firewall Software vulnerabilities

28 CVEs affecting Cisco Pix Firewall Software, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6366, published 2016-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-6366: Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability, published 2016-08-18. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-05-24. EPSS: 87.6% chance of exploitation in the next 30 days. Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM…
CVE-2004-0112, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 10.4% chance of exploitation in the next 30 days. The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote…
CVE-2006-0515, published 2006-05-09. High severity, CVSS 7.5. EPSS: 9.8% chance of exploitation in the next 30 days. Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to…
CVE-2004-0079, published 2004-11-23. High severity, CVSS 7.5. EPSS: 9.5% chance of exploitation in the next 30 days. The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null…
CVE-2004-0081, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days. OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test…
CVE-2000-1022, published 2000-12-11. High severity, CVSS 7.5. EPSS: 7.1% chance of exploitation in the next 30 days. The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a…
CVE-2006-3906, published 2006-07-27. Medium severity, CVSS 5.0. EPSS: 6.9% chance of exploitation in the next 30 days. Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via…
CVE-2003-1109, published 2003-12-31. High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days. The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote…
CVE-2003-0851, published 2003-12-01. Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days. OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
CVE-2005-3669, published 2005-11-18. Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via…

Latest

CVE-2013-0149, published 2013-08-05. Medium severity, CVSS 5.8. EPSS: 2.5% chance of exploitation in the next 30 days. The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly…
CVE-2008-0028, published 2008-01-23. High severity, CVSS 7.1. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL) decrement feature is…
CVE-2007-0962, published 2007-02-16. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows…
CVE-2007-0961, published 2007-02-16. High severity, CVSS 7.8. EPSS: 3.3% chance of exploitation in the next 30 days. Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect sip" option is enabled,…
CVE-2007-0960, published 2007-02-16. High severity, CVSS 9.0. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the LOCAL authentication method, allows remote authenticated users to gain privileges…
CVE-2007-0959, published 2007-02-16. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device reboot) via malformed…
CVE-2006-4312, published 2006-08-23. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to…
CVE-2006-4194, published 2006-08-17. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation…