Vulnerabilities > Cisco > ASA 5505 Firmware

DATE CVE VULNERABILITY TITLE RISK
2021-10-27 CVE-2021-34783 Improper Input Validation vulnerability in Cisco products
A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-20
7.5
2021-10-27 CVE-2021-34787 Improper Handling of Exceptional Conditions vulnerability in Cisco products
A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass security protections.
network
low complexity
cisco CWE-755
5.3
2021-10-27 CVE-2021-34790 Improper Input Validation vulnerability in Cisco products
Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG.
network
low complexity
cisco CWE-20
5.3
2021-10-27 CVE-2021-34791 Improper Input Validation vulnerability in Cisco products
Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG.
network
low complexity
cisco CWE-20
5.3
2021-10-27 CVE-2021-34792 Memory Leak vulnerability in Cisco products
A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-401
7.5
2021-10-27 CVE-2021-34793 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Cisco products
A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service (DoS) vulnerability.
network
low complexity
cisco CWE-924
8.6
2021-10-27 CVE-2021-34794 Unspecified vulnerability in Cisco products
A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to query SNMP data.
network
low complexity
cisco
5.3
2021-10-27 CVE-2021-40117 Resource Exhaustion vulnerability in Cisco products
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-400
7.5
2021-10-27 CVE-2021-40118 Out-of-bounds Write vulnerability in Cisco products
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition.
network
low complexity
cisco CWE-787
7.5
2021-10-27 CVE-2021-40125 Resource Exhaustion vulnerability in Cisco products
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to trigger a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-400
6.5