Priority MEDIUM 48
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass in…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02537 · Published 2010-06-29 · No fix listed CWE-264
Priority MEDIUM 47
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to have an unspecified impact via long IKE attributes, aka Bug ID CSCsu43121.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0214 · Published 2010-06-29 · No fix listed CWE-119
Priority LOW 39
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functiona…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02599 · Published 2011-02-25 · No fix listed CWE-399
Priority LOW 39
Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2010-08-06 · No fix listed
Priority LOW 39
Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before 8.2(2.13) allows remote att…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2010-08-06 · No fix listed
Priority LOW 39
Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44),…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2010-08-06 · No fix listed
Priority LOW 39
Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44),…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02518 · Published 2010-08-06 · No fix listed
Priority LOW 37
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01401 · Published 2011-02-25 · No fix listed CWE-264
Priority LOW 37
Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (traceback) via TLS fr…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01388 · Published 2010-06-29 · No fix listed
Priority LOW 37
Unspecified vulnerability in CTM on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software 8.1(2) allows remote attackers to cause a denial of service (watchdog traceback) via a large amount of small-…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01388 · Published 2010-06-29 · No fix listed
Priority LOW 37
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ID CSCsr74439.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01388 · Published 2010-06-29 · No fix listed CWE-20
Priority LOW 37
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via a high volume of SIP traffic,…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01388 · Published 2010-06-29 · No fix listed
Priority LOW 36
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (traceback) via malformed TCP packets, aka Bug ID CSCsm84110.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01205 · Published 2010-06-29 · No fix listed CWE-20
Priority LOW 36
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via unknown network traffic, as d…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01205 · Published 2010-06-29 · No fix listed
Priority LOW 36
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device crash) via vectors involving SSL VPN and…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01205 · Published 2010-06-29 · No fix listed
Priority LOW 35
Memory leak on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via Subject Alternative Name fields in an…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.00741 · Published 2010-06-29 · No fix listed CWE-399
Priority LOW 34
CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary HTTP headers as demons…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.11567 · Published 2010-06-29 · No fix listed CWE-20
Priority LOW 32
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (traceback) by establishing many IPsec…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.00963 · Published 2010-06-29 · No fix listed
Priority LOW 26
The IPv6 implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) exposes IP services on the "far side of the box," which might allow remote attackers to bypass intended…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01789 · Published 2010-06-29 · No fix listed CWE-264
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00855 · Published 2010-06-29 · No fix listed CWE-79
Priority LOW 21
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (console hang) via a login action durin…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01029 · Published 2010-06-29 · No fix listed