CVSS: 8.6EPSS: 1%CPEs: 24EXPL: 0CVE-2016-9225
https://notcve.org/view.php?id=CVE-2016-9225
01 Feb 2017 — A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security module could allow an unauthenticated, remote attacker to cause the CX module to be unable to process further traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of IP fragments. An attacker could exploit this vulnerability by sending crafted fragmented IP traffic across the CX module. An exploit could allow the attacker to exhaus... • http://www.securityfocus.com/bid/95788 • CWE-399: Resource Management Errors •
CVSS: 8.8EPSS: 0%CPEs: 26EXPL: 0CVE-2016-1301
https://notcve.org/view.php?id=CVE-2016-1301
07 Feb 2016 — The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842. La implementación RBAC en Cisco ASA-CX Content-Aware Security software anterior a 9.3.1.1(112) y Cisco Prime Security Manager (PRSM) software anterior a 9.3.1.1(112) permite a usuarios remotos autenticados cambiar contraseñas arbitraria... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160203-prsm • CWE-284: Improper Access Control •
CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0CVE-2015-0678
https://notcve.org/view.php?id=CVE-2015-0678
11 Apr 2015 — The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of service (device reload) by rapidly sending crafted packets to the management interface, aka Bug IDs CSCus11007 and CSCun56954. La capa de virtualización en Software Cisco ASA FirePOWER anterior a 5.3.1.2 y 5.4.x anterior a 5.4.0.1 y Software ASA Context-Aware (CX) anterior a 9.3.2.1-9 permite a atacantes remotos cau... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-cxfp • CWE-20: Improper Input Validation •