Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

TI-2024-13433 CVE-2024-20509 · GHSA-frxm-f6qg-2mch

Race condition in Cisco Meraki MX Firmware

Priority LOW 27

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a de…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00386 Published 2024-10-02 No fix listed CWE-362
Priority LOW 26

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of th…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00452 Published 2024-10-02 No fix listed CWE-639
Priority LOW 39

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2024-10-02 No fix listed CWE-400
Priority MEDIUM 44

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConne…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00505 Published 2024-10-02 No fix listed CWE-787
Priority MEDIUM 44

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConne…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00505 Published 2024-10-02 No fix listed CWE-787
Priority MEDIUM 40

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect servic…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00553 Published 2024-10-02 No fix listed CWE-400
TI-2024-13422 CVE-2024-20498 · GHSA-qwwc-f936-v8h7

Double free in Cisco Meraki MX Firmware

Priority MEDIUM 44

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConne…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00505 Published 2024-10-02 No fix listed CWE-415
Priority MEDIUM 46

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affe…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01142 Published 2022-10-26 No fix listed CWE-234
Priority LOW 36

Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file p…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.02046 Published 2021-01-13 No fix listed CWE-693