Vulnerabilities > Cisco > Adaptive Security Appliance Software > 9.4.4.34

DATE CVE VULNERABILITY TITLE RISK
2019-08-07 CVE-2019-1945 Improper Input Validation vulnerability in Cisco Adaptive Security Appliance Software
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established.
local
low complexity
cisco CWE-20
4.6
2019-08-07 CVE-2019-1944 Incorrect Permission Assignment for Critical Resource vulnerability in Cisco Adaptive Security Appliance Software
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established.
local
cisco CWE-732
4.4
2019-05-03 CVE-2019-1697 Improper Input Validation vulnerability in Cisco Adaptive Security Appliance Software
A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-20
7.5
2019-05-03 CVE-2019-1695 Unspecified vulnerability in Cisco Adaptive Security Appliance Software
A vulnerability in the detection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to send data directly to the kernel of an affected device.
low complexity
cisco
6.5