Known vulnerabilities in Cisco Adaptive Security Appliance (ASA) - page 3

Software CPE: cpe:2.3:h:cisco_systems:asa:*:*:*:*:*:*:*:*
Total vulnerabilities: 144
Public exploits: 7
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Adaptive Security Appliance (ASA) Cisco Adaptive Security Appliance (ASA) is affected by 144 known vulnerabilities: 2 critical, 22 high, 87 medium, 33 low Critical High Medium Low

Vulnerabilities (144)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89824 - Interpretation Conflict
CVE-2024-20293
CWE-436 Medium
No
No
9.19.1.27, 9.20.2 27.05.2024 SB2024052711
#VU89822 - Missing Authorization
CVE-2024-20355
CWE-862 Medium
No
No
6.4.0.17, 9.16.4.27, 9.17.1.33, 9.18.3.46, 9.18.4, 9.19.1.12, 9.20.1, 9.20.2 27.05.2024 SB2024052710
#VU88981 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-20353
CWE-835 High
No
Exploited
9.16.4.57, 9.18.4.22, 9.19.1.28, 9.20.2.10 24.04.2024 SB2024042464
#VU88980 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-20359
CWE-94 High
No
Exploited
9.16.4.57, 9.18.4.22, 9.19.1.28, 9.20.2.10 24.04.2024 SB2024042463
#VU88979 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-20358
CWE-78 Low
No
No
9.16.4.57, 9.18.4.22, 9.19.1.28, 9.20.2.10 24.04.2024 SB2024042462
#VU83885 - Insufficient Verification of Data Authenticity
CVE-2023-20275
CWE-345 Low
No
No
- 05.12.2023 SB2023120533
#VU82686 - Improper Certificate Validation
CVE-2023-20247
CWE-295 Medium
No
No
9.12.4.62, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110244
#VU82682 - Improper Access Control
CVE-2023-20264
CWE-284 Medium
No
No
9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110237
#VU82680 - Resource exhaustion
CVE-2023-20095
CWE-400 High
No
No
9.8.4.46, 9.8.4.48, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.22, 9.14.4.23, 9.16.3.15, 9.16.3.19, 9.16.3.23, 9.16.4, 9.16.4.9, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.10, 9.17.1.11, 9.17.1.13, 9.17.1.15, 9.17.1.20, 9.17.1.30, 9.17.1.33, 9.18.1.3, 9.18.2, 9.18.2.5, 9.18.2.7, 9.18.2.8, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110231
#VU82679 - Improper input validation
CVE-2023-20086
CWE-20 High
No
No
9.12.4.56, 9.12.4.58, 9.12.4.62, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.30, 9.17.1.33, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110228
#VU82670 - Business Logic Errors (3.0)
CVE-2023-20256
CWE-840 Medium
No
No
9.12.4.58, 9.12.4.62, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.9, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110208
#VU82669 - Business Logic Errors (3.0)
CVE-2023-20245
CWE-840 Medium
No
No
9.12.4.58, 9.12.4.62, 9.16.4.19, 9.16.4.27, 9.16.4.38, 9.16.4.39, 9.16.4.42, 9.17.1.33, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.18.3.56, 9.18.4, 9.18.4.5, 9.19.1.12, 9.19.1.18, 9.19.1.22, 9.20.1, 9.20.1.5 02.11.2023 SB2023110208
#VU82663 - Improper Resource Shutdown or Release
CVE-2023-20042
CWE-404 Medium
No
No
9.16.4.14, 9.17.1.30, 9.18.2.8, 9.18.3, 9.18.4, 9.19.1.5, 9.20.1 01.11.2023 SB2023110150
#VU80521 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-20269
CWE-288 High
No
Exploited
9.16.4.38 07.09.2023 SB2023090728
#VU77080 - Improper input validation
CVE-2023-20006
CWE-20 Medium
No
No
- 07.06.2023 SB2023060741
#VU73980 - Improper input validation
CVE-2023-20081
CWE-20 Medium
No
No
- 23.03.2023 SB2023032325
#VU73975 - Key Management Errors
CVE-2023-20107
CWE-320 Medium
No
No
9.12.1 23.03.2023 SB2023032326
#VU69202 - Memory corruption
CVE-2022-20947
CWE-119 High
No
No
006.004(000.015), 006.006(007), 007.000(002), 007.002(000), 009.008(004.044), 9.8.4.45, 9.8.4.46, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.14.4, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5 10.11.2022 SB2022111015
#VU69201 - Incorrect Authorization
CVE-2022-20928
CWE-863 Medium
No
No
006.004(000.015), 006.006(007), 007.000(002), 007.002(000), 9.8.4.46, 009.008(004.046), 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.16.3, 9.16.3.19, 9.16.3.23, 9.16.4, 9.17.1.13, 9.17.1.15, 9.17.1.20, 009.018(001), 9.18.1, 9.18.2, 9.18.2.5, 009.019(000.099) 10.11.2022 SB2022111016
#VU69200 - Improper Check or Handling of Exceptional Conditions
CVE-2022-20924
CWE-703 Medium
No
No
006.006(007), 007.000(004), 007.002(001), 9.14.4.13, 009.014(004.013), 9.14.4.14, 9.14.4.15, 9.14.4.17, 009.016(003.015), 9.16.3.19, 9.16.3.23, 009.016(003.099), 009.016(004), 9.16.4, 009.017(001.017), 9.17.1.20, 009.018(001.003), 009.018(001.099), 9.18.2, 009.018(002), 9.18.2.5, 009.019(000.099), 099.014(004.026), 099.017(002.138), 099.018(002.027), 099.018(028.006), 099.018(030.074), 099.019(001.112), 099.019(021.034), 099.019(022.033), 099.019(023.030), 099.019(030.003), 099.020(000.002) 10.11.2022 SB2022111014


Showing elements 41 - 60 out of 144