Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.17.1.9 when installed on Cisco Secure Firewall 3100 Series
ProduktUSEin im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.
nach Schweregrad
1critical10high21medium0low
aktualisiert 2026-10-30
01
Schwachstellen (75)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||||
|---|---|---|---|---|---|---|
| CVE-2025-20362US | high8.6OT kritisch | KEV | ||||
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by… | ||||||
| CVE-2025-20333US | —OT kritisch | KEV | ||||
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an aut… | ||||||
| CVE-2024-20353US | high8.6OT kritisch | KEV | ||||
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthen… | ||||||
| CVE-2023-20269US | critical9.1OT kritisch | KEV | ||||
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticate… | ||||||
| CVE-2024-20359US | medium6.0OT kritisch | KEV | ||||
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software a… | ||||||
| CVE-2024-20481US | medium5.8OT kritisch | KEV | ||||
A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauth… | ||||||
| CVE-2022-20866US | high7.5 | Exploit | ||||
A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an una… | ||||||
| CVE-2022-20829US | high7.2OT erhöht | Exploit | ||||
A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software coul… | ||||||
| CVE-2025-20363US | — | — | ||||
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Ci… | ||||||
| CVE-2022-20713US | medium6.1 | — | ||||
A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauth… | ||||||
| CVE-2022-20760US | high7.5 | — | ||||
A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… | ||||||
| CVE-2022-20745US | high7.5 | — | ||||
A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software c… | ||||||
| CVE-2024-20329US | — | — | ||||
A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root.… | ||||||
| CVE-2022-20924US | medium6.5 | — | ||||
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… | ||||||
| CVE-2025-20133US | — | — | ||||
A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthentica… | ||||||
| CVE-2025-20225US | — | — | ||||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secur… | ||||||
| CVE-2025-20224US | — | — | ||||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) S… | ||||||
| CVE-2022-20795US | high7.5OT erhöht | — | ||||
A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software coul… | ||||||
| CVE-2024-20358US | medium6.7 | — | ||||
A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software could… | ||||||
| CVE-2023-20042US | high8.6 | — | ||||
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticat… | ||||||
| CVE-2025-20263US | — | — | ||||
A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allo… | ||||||
| CVE-2024-20331US | medium5.9OT erhöht | — | ||||
A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defe… | ||||||
| CVE-2023-20086US | high8.6 | — | ||||
A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote at… | ||||||
| CVE-2024-20268US | — | — | ||||
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… | ||||||
| CVE-2025-20136US | — | — | ||||
A vulnerability in the function that performs IPv4 and IPv6 Network Address Translation (NAT) DNS inspection for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software an… | ||||||
| CVE-2025-20239US | — | — | ||||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secur… | ||||||
| CVE-2025-20243US | — | — | ||||
A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the dev… | ||||||
| CVE-2023-20256US | medium5.8 | — | ||||
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unaut… | ||||||
| CVE-2025-20182US | — | — | ||||
A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Softwar… | ||||||
| CVE-2024-20493US | medium5.3 | — | ||||
A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defens… | ||||||
| CVE-2025-20244US | — | — | ||||
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software co… | ||||||
| CVE-2024-20402US | high8.6 | — | ||||
A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… | ||||||
| CVE-2024-20495US | — | — | ||||
A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticate… | ||||||
| CVE-2023-20245US | medium5.8 | — | ||||
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unaut… | ||||||
| CVE-2024-20299US | — | — | ||||
A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, re… | ||||||
| CVE-2024-20297US | — | — | ||||
A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, re… | ||||||
| CVE-2025-20253US | — | — | ||||
A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker t… | ||||||
| CVE-2025-20251US | — | — | ||||
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software co… | ||||||
| CVE-2024-20384US | — | — | ||||
A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unau… | ||||||
| CVE-2024-20408US | — | — | ||||
A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an au… | ||||||
| CVE-2025-20254US | — | — | ||||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) S… | ||||||
| CVE-2025-20252US | — | — | ||||
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) S… | ||||||
| CVE-2024-20341US | medium6.1 | — | ||||
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthen… | ||||||
| CVE-2023-20275US | medium4.3OT erhöht | — | ||||
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated… | ||||||
| CVE-2024-20382US | medium6.1 | — | ||||
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthen… | ||||||
| CVE-2026-20073US | — | — | ||||
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote a… | ||||||
| CVE-2026-20009US | — | — | ||||
A vulnerability in the implementation of the proprietary SSH stack with SSH key-based authentication in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow… | ||||||
| CVE-2026-20039US | — | — | ||||
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an una… | ||||||
| CVE-2026-20101US | —OT erhöht | — | ||||
A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause… | ||||||
| CVE-2026-20012US | — | — | ||||
A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwar… | ||||||
50 von 75 angezeigt
02
Schwächen (8)
Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.
- CWE-401Missing Release of Memory after Effective Lifetime12 CVEs
- CWE-290Authentication Bypass by Spoofing5 CVEs
- CWE-20Improper Input Validation4 CVEs
- CWE-835Loop with Unreachable Exit Condition4 CVEs
- CWE-1287Improper Validation of Specified Type of Input3 CVEs
- CWE-284Improper Access Control3 CVEs
- CWE-345Insufficient Verification of Data Authenticity3 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation3 CVEs
03
Datenquellen (1)
Welche Quellen diesen Datensatz belegen und wann.
- USCisco PSIRT (CSAF)75 CVEs
scry
Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan