Vulnerabilities > Cisco > Adaptive Security Appliance Software > 9.6.2.13

DATE CVE VULNERABILITY TITLE RISK
2018-04-19 CVE-2018-0227 Improper Certificate Validation vulnerability in Cisco products
A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to establish an SSL VPN connection and bypass certain SSL certificate verification steps.
network
low complexity
cisco CWE-295
7.5
7.5
2018-01-29 CVE-2018-0101 Double Free vulnerability in Cisco Adaptive Security Appliance Software
A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code.
network
low complexity
cisco CWE-415
critical
 10.0
10