cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2017-12373,https://securityvulnerability.io/vulnerability/CVE-2017-12373,,"A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat (ROBOT) attack. An attacker could iteratively query a server running a vulnerable TLS stack implementation to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions. Cisco Bug IDs: CSCvg97652.",Cisco,Cisco Legacy Asa 5500 Products Tls Protocol Implementation,5.9,MEDIUM,0.0015999999595806003,false,,false,false,false,,,false,false,,2017-12-15T20:00:00.000Z,0 CVE-2016-1312,https://securityvulnerability.io/vulnerability/CVE-2016-1312,,"The HTTPS inspection engine in the Content Security and Control Security Services Module (CSC-SSM) 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers to cause a denial of service (memory consumption or device reload) via a flood of HTTPS packets, aka Bug ID CSCue76147.",Cisco,Asa 5500 Csc-ssm Firmware,7.5,HIGH,0.005200000014156103,false,,false,false,false,,,false,false,,2016-03-09T20:00:00.000Z,0 CVE-2013-1218,https://securityvulnerability.io/vulnerability/CVE-2013-1218,,"Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272.",Cisco,"Ips 4520 Sensor,Asa 5585-x,Ips 4345 Sensor,Ips Nme,Ips 4510 Sensor,Ips 4360 Sensor,Asa 5500-x Series Ips Ssp Software,Idsm-2,Intrusion Prevention System",,,0.001610000035725534,false,,false,false,false,,,false,false,,2013-07-18T12:48:00.000Z,0 CVE-2013-1243,https://securityvulnerability.io/vulnerability/CVE-2013-1243,,"The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote attackers to cause a denial of service (MainApp process hang) via malformed IPv4 packets, aka Bug ID CSCtx18596.",Cisco,"Ips 4520 Sensor,Asa 5585-x,Ips 4345 Sensor,Ips Nme,Ips 4510 Sensor,Ips 4360 Sensor,Asa 5500-x Series Ips Ssp Software,Idsm-2,Intrusion Prevention System",,,0.001610000035725534,false,,false,false,false,,,false,false,,2013-07-18T12:48:00.000Z,0 CVE-2013-1215,https://securityvulnerability.io/vulnerability/CVE-2013-1215,,"The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.00171999994199723,false,,false,false,false,,,false,false,,2013-04-25T20:55:00.000Z,0 CVE-2012-5717,https://securityvulnerability.io/vulnerability/CVE-2012-5717,,"Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions, which allows remote authenticated users to cause a denial of service (device crash) by establishing multiple sessions, aka Bug ID CSCtc59462.",Cisco,"Adaptive Security Appliance Software,Adaptive Security Appliance,Asa 1000v Cloud Firewall,Asa 5500",,,0.0010000000474974513,false,,false,false,false,,,false,false,,2013-01-18T21:00:00.000Z,0 CVE-2012-6395,https://securityvulnerability.io/vulnerability/CVE-2012-6395,,"Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service (device crash) via unknown vectors, aka Bug ID CSCuc65775.",Cisco,"Adaptive Security Appliance Software,Adaptive Security Appliance,Asa 1000v Cloud Firewall,Asa 5500",,,0.0021800000686198473,false,,false,false,false,,,false,false,,2013-01-18T21:00:00.000Z,0 CVE-2011-3304,https://securityvulnerability.io/vulnerability/CVE-2011-3304,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.2(5.3), 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2), and 8.5 before 8.5(1.1) allow remote attackers to cause a denial of service (device reload) via crafted MSN Instant Messenger traffic, aka Bug ID CSCtl67486.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500,Catalyst 6500,Catalyst 7600",,,0.00675999978557229,false,,false,false,false,,,false,false,,2011-10-06T10:00:00.000Z,0 CVE-2011-3303,https://securityvulnerability.io/vulnerability/CVE-2011-3303,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 before 8.1(2.50), 8.2 before 8.2(5.6), 8.3 before 8.3(2.23), 8.4 before 8.4(2.7), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via malformed ILS traffic, aka Bug IDs CSCtq57697 and CSCtq57802.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.00675999978557229,false,,false,false,false,,,false,false,,2011-10-06T10:00:00.000Z,0 CVE-2011-3298,https://securityvulnerability.io/vulnerability/CVE-2011-3298,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.3), 8.0 before 8.0(5.24), 8.1 before 8.1(2.50), 8.2 before 8.2(5), 8.3 before 8.3(2.18), 8.4 before 8.4(1.10), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to bypass authentication via a crafted TACACS+ reply, aka Bug IDs CSCto40365 and CSCto74274.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.006459999829530716,false,,false,false,false,,,false,false,,2011-10-06T10:00:00.000Z,0 CVE-2011-3300,https://securityvulnerability.io/vulnerability/CVE-2011-3300,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCtq06065 and CSCtq09978.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.00675999978557229,false,,false,false,false,,,false,false,,2011-10-06T10:00:00.000Z,0 CVE-2011-3299,https://securityvulnerability.io/vulnerability/CVE-2011-3299,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCto92380 and CSCtq09972.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.005630000028759241,false,,false,false,false,,,false,false,,2011-10-06T10:00:00.000Z,0 CVE-2011-3301,https://securityvulnerability.io/vulnerability/CVE-2011-3301,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCtq06062 and CSCtq09986.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.00675999978557229,false,,false,false,false,,,false,false,,2011-10-06T10:00:00.000Z,0 CVE-2011-3302,https://securityvulnerability.io/vulnerability/CVE-2011-3302,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.4), 8.0 before 8.0(5.25), 8.1 and 8.2 before 8.2(5.11), 8.3 before 8.3(2.23), 8.4 before 8.4(2.6), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic, aka Bug IDs CSCto92398 and CSCtq09989.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.00675999978557229,false,,false,false,false,,,false,false,,2011-10-06T10:00:00.000Z,0 CVE-2011-0379,https://securityvulnerability.io/vulnerability/CVE-2011-0379,,"Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco TelePresence Manager 1.2.x, 1.3.x, 1.4.x, 1.5.x, and 1.6.2 allows remote attackers to execute arbitrary code via a crafted Cisco Discovery Protocol packet, aka Bug IDs CSCtd75769, CSCtd75766, CSCtd75754, and CSCtd75761.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.11636999994516373,false,,false,false,false,,,false,false,,2011-02-25T11:00:00.000Z,0 CVE-2011-0394,https://securityvulnerability.io/vulnerability/CVE-2011-0394,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3 before 8.3(1.8); Cisco PIX Security Appliances 500 series devices; and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(20), 3.2 before 3.2(20), 4.0 before 4.0(15), and 4.1 before 4.1(5) allow remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug IDs CSCtg69457 and CSCtl84952.",Cisco,"Adaptive Security Appliance,Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.02742999978363514,false,,false,false,false,,,false,false,,2011-02-25T11:00:00.000Z,0 CVE-2011-0393,https://securityvulnerability.io/vulnerability/CVE-2011-0393,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12), 7.1 and 7.2 before 7.2(5.2), 8.0 before 8.0(5.21), 8.1 before 8.1(2.49), 8.2 before 8.2(3.6), and 8.3 before 8.3(2.7) and Cisco PIX Security Appliances 500 series devices, when transparent firewall mode is configured but IPv6 is not configured, allow remote attackers to cause a denial of service (packet buffer exhaustion and device outage) via IPv6 traffic, aka Bug ID CSCtj04707.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.01355000026524067,false,,false,false,false,,,false,false,,2011-02-25T11:00:00.000Z,0 CVE-2011-0395,https://securityvulnerability.io/vulnerability/CVE-2011-0395,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP update, aka Bug ID CSCtg66583.",Cisco,"Adaptive Security Appliance,Adaptive Security Appliance Software,Asa 5500,Asa 5505,Asa 5510,Asa 5520,Asa 5540,Asa 5550,Asa 5580,Pix 500,Pix 501,Pix 506e,Pix Firewall 506,Pix Firewall 515,Pix Firewall 520,Pix Firewall 525,Pix Firewall 535",,,0.01355000026524067,false,,false,false,false,,,false,false,,2011-02-25T11:00:00.000Z,0 CVE-2011-0396,https://securityvulnerability.io/vulnerability/CVE-2011-0396,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352.",Cisco,"Adaptive Security Appliance,Adaptive Security Appliance Software,Asa 5500,Asa 5505,Asa 5510,Asa 5520,Asa 5540,Asa 5550,Asa 5580,Pix 500,Pix 501,Pix 506e,Pix Firewall 506,Pix Firewall 515,Pix Firewall 520,Pix Firewall 525,Pix Firewall 535",,,0.004600000102072954,false,,false,false,false,,,false,false,,2011-02-25T11:00:00.000Z,0 CVE-2010-4692,https://securityvulnerability.io/vulnerability/CVE-2010-4692,,"Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) via a large number of LAN-to-LAN (aka L2L) IPsec sessions, aka Bug ID CSCth36592.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.01281999982893467,false,,false,false,false,,,false,false,,2011-01-07T22:00:00.000Z,0 CVE-2010-4688,https://securityvulnerability.io/vulnerability/CVE-2010-4688,,"Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) by making many SIP calls, aka Bug ID CSCte20030.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.01281999982893467,false,,false,false,false,,,false,false,,2011-01-07T22:00:00.000Z,0 CVE-2010-4690,https://securityvulnerability.io/vulnerability/CVE-2010-4690,,"The Mobile User Security (MUS) service on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) does not properly authenticate HTTP requests from a Web Security appliance (WSA), which might allow remote attackers to obtain sensitive information via a HEAD request, aka Bug ID CSCte53635.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.003719999920576811,false,,false,false,false,,,false,false,,2011-01-07T22:00:00.000Z,0 CVE-2010-4689,https://securityvulnerability.io/vulnerability/CVE-2010-4689,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID CSCte46460.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.0031300000846385956,false,,false,false,false,,,false,false,,2011-01-07T22:00:00.000Z,0 CVE-2010-4691,https://securityvulnerability.io/vulnerability/CVE-2010-4691,,"Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) via multicast traffic, aka Bug IDs CSCtg61810 and CSCtg69742.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.01281999982893467,false,,false,false,false,,,false,false,,2011-01-07T22:00:00.000Z,0 CVE-2009-5037,https://securityvulnerability.io/vulnerability/CVE-2009-5037,,"Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (ASDM syslog outage) via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911.",Cisco,"Adaptive Security Appliance Software,5500 Series Adaptive Security Appliance,Asa 5500",,,0.01281999982893467,false,,false,false,false,,,false,false,,2011-01-07T11:00:00.000Z,0