Vulnerabilities > Cisco > ASA CX Context Aware Security Software

DATE CVE VULNERABILITY TITLE RISK
2017-02-01 CVE-2016-9225 Resource Management Errors vulnerability in Cisco ASA CX Context-Aware Security Software
A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security module could allow an unauthenticated, remote attacker to cause the CX module to be unable to process further traffic, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-399
7.8
2016-02-07 CVE-2016-1301 Improper Access Control vulnerability in Cisco products
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842.
network
cisco CWE-284
8.5
2015-10-30 CVE-2015-6344 Information Exposure vulnerability in Cisco ASA CX Context-Aware Security Software 9.3.4.1.11
The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105.
network
low complexity
cisco CWE-200
4.0
2015-04-11 CVE-2015-0678 Improper Input Validation vulnerability in Cisco products
The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of service (device reload) by rapidly sending crafted packets to the management interface, aka Bug IDs CSCus11007 and CSCun56954.
network
low complexity
cisco CWE-20
7.8
2013-06-18 CVE-2013-1203 Improper Input Validation vulnerability in Cisco ASA CX Context-Aware Security Software
Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service (device reload) via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive Security Appliances (ASA) device, aka Bug ID CSCue88386.
network
high complexity
cisco CWE-20
5.4