Cisco Asa 5540 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Asa 5540 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2020-3125 — CVSS 9.8 (critical): A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated…
• CVE-2020-3187 — CVSS 9.1 (critical): A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
• CVE-2020-3283 — CVSS 8.6 (high): A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software…
• CVE-2019-15256 — CVSS 8.6 (high): A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
• CVE-2020-3189 — CVSS 8.6 (high): A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated…
• CVE-2020-3191 — CVSS 8.6 (high): A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD)…
• CVE-2020-3196 — CVSS 8.6 (high): A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA)…
• CVE-2020-3255 — CVSS 7.5 (high): A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated…
• CVE-2020-3195 — CVSS 7.5 (high): A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco…
• CVE-2020-3254 — CVSS 7.5 (high): Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA)…
• CVE-2020-3179 — CVSS 7.5 (high): A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software…
• CVE-2020-3188 — CVSS 5.3 (medium): A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an…
• CVE-2020-3186 — CVSS 5.3 (medium): A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an…
• CVE-2011-2054 — CVSS 4.3 (medium): A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if…