ASA 5585 X

DATE	CVE	VULNERABILITY TITLE	RISK
2020-02-19	CVE-2011-2054	Improper Authentication vulnerability in Cisco products A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. network cisco CWE-287	6.0
2013-07-18	CVE-2013-1243	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco products The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote attackers to cause a denial of service (MainApp process hang) via malformed IPv4 packets, aka Bug ID CSCtx18596. network low complexity cisco CWE-119	7.8
2013-07-18	CVE-2013-1218	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco products Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272. network low complexity cisco CWE-119	7.8