CVSS: 7.8EPSS: 38%CPEs: 31EXPL: 3CVE-2016-6367 – Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2016-6367
18 Aug 2016 — Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA. Cisco Adaptive Security Applicance (ASA) Software en versiones anteriores a 8.4(1) en dispositivos ASA 5500, ASA 5500-X, PIX y FWSM permite a usuarios locales obtener privilegios a través de comandos CLI no válidos, también conocido como Bug ID CSCtu74257 o EPICBANANA. A vulnerability in the command-... • https://www.exploit-db.com/exploits/40271 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 7.1EPSS: 0%CPEs: 79EXPL: 0CVE-2014-0710
https://notcve.org/view.php?id=CVE-2014-0710
22 Feb 2014 — Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows remote attackers to cause a denial of service (device reload) via certain matching traffic, aka Bug ID CSCuj16824. Condición de carrera en la funcionalidad "cut-through proxy" en Cisco Firewall Services Module (FWSM) Software 3.x anterior a 3.2(28) y 4.x anterior a 4.1(15) permite a atacantes remotos causar una denegación de servicio (reinicio de dispositivo) a t... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-fwsm • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.1EPSS: 0%CPEs: 72EXPL: 0CVE-2013-5506
https://notcve.org/view.php?id=CVE-2013-5506
13 Oct 2013 — The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context's configuration via unspecified commands, aka Bug ID CSCue46080. La funcionalidad de autorización en Cisco Firewall Services Module (FWSM) 3.1.x y 3.2.x anterior a 3.2(25) y 4.x anterior a 4.1(13), cuando el modo multiple-context está habilitado, permite a usuarios locales leer o modificar cualq... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-fwsm • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 0%CPEs: 168EXPL: 0CVE-2013-5508
https://notcve.org/view.php?id=CVE-2013-5508
13 Oct 2013 — The SQL*Net inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.6), 9.0.x before 9.0(2.10), and 9.1.x before 9.1(2) and Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(27) and 4.x before 4.1(14) allows remote attackers to cause a denial of service (device reload) via crafted segmented Transparent Network Substrate (TNS) packe... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-asa • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2013-1195
https://notcve.org/view.php?id=CVE-2013-1195
24 Apr 2013 — The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic during denied time periods, aka Bug IDs CSCuf79091 and CSCug45850. La implementación de ACL basado en el tiempo de Cisco Adaptive Security Appliances (ASA) dispositivos y en el Módulo de Servicios Cisco Firewal... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1195 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2013-1193
https://notcve.org/view.php?id=CVE-2013-1193
16 Apr 2013 — The Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly terminate sessions, which allows remote attackers to cause a denial of service (SSH service outage) by repeatedly establishing SSH connections, aka Bug IDs CSCue63881, CSCuf51892, CSCue78671, and CSCug26937. La implementación de Secure Shell (SSH) en dispositivos Cisco Adaptive Security Appliances (ASA) y Cisco Firewall Services Module (FWSM), no termina ... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1193 •
CVSS: 7.8EPSS: 0%CPEs: 151EXPL: 0CVE-2013-1149
https://notcve.org/view.php?id=CVE-2013-1149
11 Apr 2013 — Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before 8.4(4.11), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3), and Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(24.1) and 4.0 and 4.1 before 4.1(11.1), allow remote attackers to cause a denial of service (device reload) via a crafted IKEv1 message, aka Bug IDs CSCub85692 and CSCud20267. Cisco Adaptive Security Appliances... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa •
CVSS: 7.8EPSS: 0%CPEs: 43EXPL: 0CVE-2013-1155
https://notcve.org/view.php?id=CVE-2013-1155
11 Apr 2013 — The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCtg02624. La funcionalidad de autenticación de proxy en Cisco Firewall Services Module (FWSM) software v3.1 y v3.2 antes de v3.2(20.1), v4.0 antes de v4.0(15.2), y v4.1 antes de v4.1(5.1) permite a atacantes remotos provocar una denegación de servicio (rec... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-fwsm • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 2%CPEs: 166EXPL: 0CVE-2012-0356
https://notcve.org/view.php?id=CVE-2012-0356
15 Mar 2012 — Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before 7.2(5.7), 8.0 before 8.0(5.27), 8.1 before 8.1(2.53), 8.2 before 8.2(5.8), 8.3 before 8.3(2.25), 8.4 before 8.4(2.5), and 8.5 before 8.5(1.2) and the Firewall Services Module (FWSM) 3.1 and 3.2 before 3.2(23) and 4.0 and 4.1 before 4.1(8) in Cisco Catalyst 6500 series devices, when multicast routing is enabled, allow remote attackers to... • http://osvdb.org/80041 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 66EXPL: 0CVE-2011-3296
https://notcve.org/view.php?id=CVE-2011-3296
06 Oct 2011 — Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015, aka Bug ID CSCti83875. Cisco Firewall Services Module (también conocido como FWSM) v3.1 antes de v3.1(21), v3.2 antes de v3.2(22), v4.0 antes de v4.0(16), y v4.1 antes de v4.1(7), cuando se utiliza IPv6, permite a atacante... • http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml • CWE-399: Resource Management Errors •