Cisco Adaptive Security Appliance vulnerabilities

A vulnerability in the VPN web server of Cisco ASA and FTD Software allows an authenticated local attacker with administrator privileges to execute arbitrary code with root privileges. This is due to improper validation of a specific file when read from system flash memory.

A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software for Firepower 2100 Series Appliances could allow an unauthenticated, remote attacker to cause an unexpected reload, resulting in a denial of service (DoS). This is due to an implementation error in cryptographic functions when offloaded to hardware. An attacker could exploit this by sending a crafted stream of SSL/TLS traffic.

A vulnerability in the deterministic random bit generator (DRBG) in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software for ASA 5506-X, ASA 5508-X, and ASA 5516-X Firewalls could allow an unauthenticated, remote attacker to cause a cryptographic collision, enabling discovery of the device's private key. This is due to insufficient entropy in the DRBG on these hardware platforms. An attacker could exploit this by generating many keys and looking for collisions with target devices.

A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a device reload, resulting in a denial of service (DoS). This is due to improper processing of HostScan data from the Posture module. An attacker could exploit this by sending crafted HostScan data.

A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS). This is due to insufficient input validation. An attacker could exploit this by sending a crafted SNMP request, causing a device reload.

A vulnerability in the remote access SSL VPN features of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This is due to improper validation of logged errors from client connections. An attacker could exploit this by sending crafted requests, causing the device to restart.

A vulnerability in the software cryptography module of Cisco ASA and FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition. This is due to a logic error in handling specific decryption errors. An attacker could exploit this by sending malicious packets over an established IPsec connection, causing a crash and reload. Important: Successful exploitation would not compromise encrypted data. This affects only ASA 9.16.1 and FTD 7.0.0.

A vulnerability in the web services interface of Cisco ASA and FTD Software could allow an authenticated, remote attacker to cause a buffer overflow on an affected system. This is due to insufficient boundary checks for specific data. An attacker could exploit this by sending a malicious HTTP request, potentially disclosing data fragments or causing a device reload and DoS.

A vulnerability in the web services interface of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to upload arbitrary-sized files to specific folders, leading to an unexpected device reload. The issue is due to inefficient handling of large file writes. An attacker could upload files to trigger a watchdog timeout, causing device reload and DoS.

A vulnerability in the DHCP module of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This is due to incorrect processing of certain DHCP packets. An attacker could exploit this by sending a crafted DHCP packet, causing a DoS.

A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This is due to incorrect processing of certain BGP packets. An attacker could exploit this by sending a crafted BGP packet, causing a DoS.

A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This is due to improper management of system memory. An attacker could exploit this by sending malicious IKEv1 traffic, causing a DoS.

A vulnerability in the IKEv1 feature of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a DoS condition. The issue is due to improper management of system memory. An attacker could send malicious IKEv1 traffic without valid credentials, leading to memory exhaustion and device reload.

A vulnerability in the WebVPN feature of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The issue is due to excessive processing load for a specific WebVPN HTTP page request. An attacker could send multiple WebVPN HTTP page load requests for a specific URL, leading to increased CPU load and DoS.

A vulnerability in the SAML 2.0 SSO implementation for Clientless SSL VPN and AnyConnect Remote Access VPN in Cisco ASA and FTD could allow an unauthenticated, remote attacker to establish a VPN session. The issue is due to improper credential management when using NTLM or basic authentication. An attacker could open a VPN session after another user authenticates via SAML SSO, allowing connection to secured networks.

A vulnerability in the MOBIKE feature for Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device, leading to a DoS condition. The issue is due to incorrect processing of certain MOBIKE packets. An attacker could send crafted MOBIKE packets to cause continuous memory consumption and eventual reload.

A vulnerability in the WebVPN login process of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The issue is due to excessive processing load for existing WebVPN login operations. An attacker could send multiple WebVPN login requests, leading to increased CPU load and DoS.

A vulnerability in the SSL VPN Client Certificate Authentication feature for Cisco ASA and FTD could allow an unauthenticated, remote attacker to establish an SSL VPN connection and bypass certain SSL certificate verification steps. The issue is due to incorrect verification of the SSL Client Certificate. An attacker could exploit this by connecting without a proper private key and certificate pair, allowing a connection that should have been rejected.