Priority MEDIUM 50
A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload u…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.03861 · Published 2020-10-21 · No fix listed CWE-400
Priority MEDIUM 47
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of servi…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01729 · Published 2021-10-27 · No fix listed CWE-119
Priority MEDIUM 47
A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of se…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01795 · Published 2020-10-21 · No fix listed CWE-400
Priority MEDIUM 47
A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01848 · Published 2020-10-21 · No fix listed CWE-400
Priority MEDIUM 47
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to upload arbitrary-sized files t…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01937 · Published 2020-10-21 · No fix listed CWE-434
Priority MEDIUM 46
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01362 · Published 2021-10-27 · No fix listed CWE-121
Priority MEDIUM 46
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01362 · Published 2022-01-11 · Fixed in 6.4.0.13, 6.6.5 CWE-121
Priority MEDIUM 46
A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01446 · Published 2020-10-21 · No fix listed CWE-400
Priority MEDIUM 44
A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poiso…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00586 · Published 2021-10-27 · No fix listed CWE-924
Priority MEDIUM 44
A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of serv…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0269 · Published 2020-10-21 · No fix listed CWE-400
Priority MEDIUM 43
A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilizati…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01985 · Published 2019-10-02 · No fix listed CWE-400
Priority MEDIUM 43
A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote atta…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01842 · Published 2019-10-02 · No fix listed CWE-191
Priority MEDIUM 42
A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01788 · Published 2019-10-02 · No fix listed CWE-119
Priority MEDIUM 40
A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00717 · Published 2023-03-23 · No fix listed CWE-332
Priority MEDIUM 40
A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attac…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00702 · Published 2022-04-21 · No fix listed CWE-345
Priority MEDIUM 40
A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04072 · Published 2020-09-23 · No fix listed CWE-119
Priority MEDIUM 40
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3 before 8.3(1.8); Cis…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03442 · Published 2011-02-25 · No fix listed CWE-399
Priority LOW 39
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functiona…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02599 · Published 2011-02-25 · No fix listed CWE-399
Priority LOW 39
Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2010-08-06 · No fix listed
Priority LOW 39
Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before 8.2(2.13) allows remote att…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2010-08-06 · No fix listed
Priority LOW 39
Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44),…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2010-08-06 · No fix listed
Priority LOW 39
Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44),…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2010-08-06 · No fix listed
Priority LOW 39
Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44),…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2010-08-06 · No fix listed
Priority LOW 38
The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a de…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01904 · Published 2013-06-26 · No fix listed CWE-20
Priority LOW 38
Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload) via a crafted field in a DNS message, aka Bug ID CSCuc80080.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0189 · Published 2013-04-11 · No fix listed
Load more