Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

63 records in Adaptive Security Appliance · all components

Priority MEDIUM 50

A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload u…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.03861 Published 2020-10-21 No fix listed CWE-400
Priority MEDIUM 47

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of servi…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01729 Published 2021-10-27 No fix listed CWE-119
Priority MEDIUM 47

A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of se…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01795 Published 2020-10-21 No fix listed CWE-400
Priority MEDIUM 47

A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01848 Published 2020-10-21 No fix listed CWE-400
Priority MEDIUM 47

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to upload arbitrary-sized files t…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01937 Published 2020-10-21 No fix listed CWE-434
Priority MEDIUM 46

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01362 Published 2021-10-27 No fix listed CWE-121
Priority MEDIUM 46

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01362 Published 2022-01-11 Fixed in 6.4.0.13, 6.6.5 CWE-121
Priority MEDIUM 46

A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01446 Published 2020-10-21 No fix listed CWE-400
Priority MEDIUM 44

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poiso…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00586 Published 2021-10-27 No fix listed CWE-924
Priority MEDIUM 44

A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of serv…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0269 Published 2020-10-21 No fix listed CWE-400
Priority MEDIUM 43

A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilizati…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01985 Published 2019-10-02 No fix listed CWE-400
Priority MEDIUM 43

A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote atta…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01842 Published 2019-10-02 No fix listed CWE-191
Priority MEDIUM 42

A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01788 Published 2019-10-02 No fix listed CWE-119
Priority MEDIUM 40

A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00717 Published 2023-03-23 No fix listed CWE-332
Priority MEDIUM 40

A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attac…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2022-04-21 No fix listed CWE-345
Priority MEDIUM 40

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04072 Published 2020-09-23 No fix listed CWE-119
Load more
Open these records in search →