VendorsCiscoasa_5580any version
Vulnerabilities

Cisco ASA 5580 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

70CVEs
CVE-2009-4917
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via a high volume of SIP traffic, aka Bug ID CSCsr65901.
Published 2010-06-29 · Modified
7.8EPSS 0.014
CVE-2009-4923
Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (traceback) via TLS fragments, aka Bug ID CSCso53162.
Published 2010-06-29 · Modified
7.8EPSS 0.014
CVE-2020-3306
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability
Published 2020-05-06 · Modified
7.8EPSS 0.012
CVE-2020-3305
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability
Published 2020-05-06 · Modified
7.8EPSS 0.012
CVE-2020-3303
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability
Published 2020-05-06 · Modified
7.8EPSS 0.012
CVE-2009-4915
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via unknown network traffic, as demonstrated by a "connection stress test," aka Bug ID CSCsq68451.
Published 2010-06-29 · Modified
7.8EPSS 0.012
CVE-2009-4921
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (traceback) via malformed TCP packets, aka Bug ID CSCsm84110.
Published 2010-06-29 · Modified
7.8EPSS 0.012
CVE-2009-4914
Memory leak on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879.
Published 2010-06-29 · Modified
7.8EPSS 0.007
CVE-2019-1693
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability
Published 2019-05-03 · Modified
7.7EPSS 0.020
CVE-2019-12677
Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability
Published 2019-10-02 · Modified
7.7EPSS 0.015
CVE-2020-3452
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
Published 2020-07-22 · Analyzed
7.5KEV3 PoCEPSS 1.000
CVE-2020-3255
Cisco Firepower Threat Defense Software Packet Flood Denial of Service Vulnerability
Published 2020-05-06 · Modified
7.5EPSS 0.018
CVE-2011-2054
Cisco ASA Secondary Authentication Bypass Vulnerability
Published 2020-02-19 · Modified
7.5EPSS 0.009
CVE-2022-20795
Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software AnyConnect SSL VPN Denial of Service Vulnerability
Published 2022-04-21 · Modified
7.5EPSS 0.007
CVE-2019-12676
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF LSA Processing Denial of Service Vulnerability
Published 2019-10-02 · Modified
7.4EPSS 0.005
CVE-2019-12693
Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability
Published 2019-10-02 · Modified
6.8EPSS 0.015
CVE-2009-4922
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (traceback) by establishing many IPsec L2L tunnels from remote peer IP addresses, aka Bug ID CSCso15583.
Published 2010-06-29 · Modified
6.8EPSS 0.010
CVE-2021-40125
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability
Published 2021-10-27 · Modified
6.5EPSS 0.010
CVE-2019-12695
Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerability
Published 2019-10-02 · Modified
6.1EPSS 0.011
CVE-2020-3188
Cisco Firepower Threat Defense Software Management Interface Denial of Service Vulnerability
Published 2020-05-06 · Modified
5.3EPSS 0.017
CVE-2020-3186
Cisco Firepower Threat Defense Software Management Access List Bypass Vulnerability
Published 2020-05-06 · Modified
5.3EPSS 0.014
CVE-2021-34790
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities
Published 2021-10-27 · Modified
5.3EPSS 0.011
CVE-2021-34791
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities
Published 2021-10-27 · Modified
5.3EPSS 0.011
CVE-2021-34787
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability
Published 2021-10-27 · Modified
5.3EPSS 0.010
CVE-2021-34794
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability
Published 2021-10-27 · Modified
5.3EPSS 0.009
CVE-2009-4913
The IPv6 implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) exposes IP services on the "far side of the box," which might allow remote attackers to bypass intended access restrictions via IPv6 packets, aka Bug ID CSCso58622.
Published 2010-06-29 · Modified
5.0EPSS 0.018
CVE-2014-3394
The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun10916.
Published 2014-10-10 · Modified
5.0EPSS 0.010
CVE-2019-1701
Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerabilities
Published 2019-05-03 · Modified
4.8EPSS 0.009
CVE-2009-4910
Cross-site scripting (XSS) vulnerability in the WebVPN portal on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCsq78418.
Published 2010-06-29 · Modified
4.3EPSS 0.009
CVE-2009-4916
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (console hang) via a login action during failover replication, aka Bug ID CSCsq80095.
Published 2010-06-29 · Modified
4.0EPSS 0.010
← Prev2 / 2