CVE-2019-1705
Cisco Adaptive Security Appliance Software VPN Denial of Service Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
40Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of service (DoS) condition on the remote access VPN services. The vulnerability is due to an issue with the remote access VPN session manager. An attacker could exploit this vulnerability by requesting an excessive number of remote access VPN sessions. An exploit could allow the attacker to cause a DoS condition.
Una vulnerabilidad en el administrador de sesiones VPN de acceso remoto de Cisco Adaptive Security Appliance (ASA) Software podría permitir a un atacante remoto no autenticado provocar una condición de denegación de servicio (DoS) en los servicios VPN de acceso remoto. La vulnerabilidad se debe a un problema con el administrador de sesiones VPN de acceso remoto. Un atacante podría explotar esta vulnerabilidad solicitando un número excesivo de sesiones VPN de acceso remoto. Un exploit podría permitir al atacante causar una condición de DoS.
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2018-12-06 CVE Reserved
- 2019-05-03 CVE Published
- 2024-11-19 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-404: Improper Resource Shutdown or Release
CAPEC
References (2)
URL | Date | SRC |
---|
URL | Date | SRC |
---|