Lucene search
CiscoCVE-2014-2126HistoryApr 10, 2014 - 4:34 a.m.
CVE-2014-2126
2014-04-1004:34:50
CWE-264
cisco
web.nvd.nist.gov
27
cisco
asa
software
privilege escalation
cve-2014-2126
cscuj33496
nvd
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0.002
Percentile
54.0%
Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 before 9.0(3.10), and 9.1 before 9.1(3.4) allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496.
Affected configurations
Node
ciscoadaptive_security_appliance_softwareMatch8.2
ORciscoadaptive_security_appliance_softwareMatch8.4
ORciscoadaptive_security_appliance_softwareMatch8.7
ORciscoadaptive_security_appliance_softwareMatch9.0
ORciscoadaptive_security_appliance_softwareMatch9.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | 8.2 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.4 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 8.7 | cpe:2.3:o:cisco:adaptive_security_appliance_software:8.7:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 9.0 | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.0:*:*:*:*:*:*:* |
| cisco | adaptive_security_appliance_software | 9.1 | cpe:2.3:o:cisco:adaptive_security_appliance_software:9.1:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2014-2126
2014-04-10 04:34:50
prion
prion
Code injection
2014-04-10 04:34:00
cvelist
cvelist
CVE-2014-2126
2014-04-10 01:00:00
seebug
seebug
Cisco Adaptive Security Appliance θΏη¨ζιζεζΌζ΄
2014-04-14 00:00:00
nmap
nmap
http-vuln-cve2014-2126 NSE Script
2014-05-26 01:28:38
nessus
nessus
Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20140409-asa)
2014-04-15 00:00:00
securityvulns
securityvulns
Cisco ASA multiple security vulnerabilities
2014-05-05 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco ASA Software
2014-04-09 16:00:00
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0.002
Percentile
54.0%
Related for CVE-2014-2126