Skip to content
OpenAdvisories
High WID-SEC-2024-1218 5 CVEs

Cisco ASA (Adaptive Security Appliance) und Cisco Firepower: Mehrere Schwachstellen ermöglichen Denial of Service

Published Apr 27, 2022 · Updated May 22, 2024 · Revision 3 · de-DE

Vendor: Cisco Product: ASA (Adaptive Security Appliance) Product: Firepower

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco ASA (Adaptive Security Appliance) und Cisco Firepower ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen und seine Privilegien zu erweitern.

Product

Die Cisco ASA Appliance bietet Funktionen zur Sicherung von Anwendungssoftware, wie beispielsweise Firewall oder VPN.
Firepower ist eine Firewall-Plattform von Cisco

Vulnerabilities 5

  • High 8.8
    CVE-2022-20759 EPSS 29%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability

    A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, but unprivileged, remote attacker to elevate privi…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.6
    CVE-2022-20715

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

    A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affe…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.6
    CVE-2022-20745

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability

    A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (Do…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 8.6
    CVE-2022-20760

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability

    A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service condition (DoS) on an affected device. T…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  • High 7.4
    CVE-2022-20742

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability

    A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. This vulnera…

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices

Revision history

  1. #3

    Neue Updates von Cisco aufgenommen

  2. #2

    PoC für CVE-2022-20759 aufgenommen

  3. #1

    Initiale Fassung

References