Cisco Asa 5555-x Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Asa 5555-x Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (24)

• CVE-2020-3125 — CVSS 9.8 (critical): A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated…
• CVE-2020-3187 — CVSS 9.1 (critical): A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
• CVE-2021-34792 — CVSS 8.6 (high): A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software…
• CVE-2021-34793 — CVSS 8.6 (high): A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software…
• CVE-2019-15256 — CVSS 8.6 (high): A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
• CVE-2020-3189 — CVSS 8.6 (high): A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated…
• CVE-2020-3191 — CVSS 8.6 (high): A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD)…
• CVE-2021-40118 — CVSS 8.6 (high): A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
• CVE-2021-40117 — CVSS 8.6 (high): A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
• CVE-2020-3196 — CVSS 8.6 (high): A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA)…
• CVE-2020-3283 — CVSS 8.6 (high): A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software…
• CVE-2021-34783 — CVSS 8.6 (high): A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat…
• CVE-2020-3255 — CVSS 7.5 (high): A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated…
• CVE-2020-3195 — CVSS 7.5 (high): A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco…
• CVE-2020-3179 — CVSS 7.5 (high): A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software…
• CVE-2020-3254 — CVSS 7.5 (high): Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA)…
• CVE-2021-40125 — CVSS 5.3 (medium): A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
• CVE-2020-3186 — CVSS 5.3 (medium): A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an…
• CVE-2020-3188 — CVSS 5.3 (medium): A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an…
• CVE-2021-34787 — CVSS 5.3 (medium): A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
• CVE-2021-34794 — CVSS 5.3 (medium): A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security…
• CVE-2021-34791 — CVSS 4.7 (medium): Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive…
• CVE-2021-34790 — CVSS 4.7 (medium): Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive…
• CVE-2011-2054 — CVSS 4.3 (medium): A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if…