Lucene search

CiscoCVE-2019-1705

HistoryMay 03, 2019 - 4:29 p.m.

CVE-2019-1705

2019-05-0316:29:00

CWE-404

cisco

web.nvd.nist.gov

cve-2019-1705

cisco

asa

vpn

vulnerability

remote access

dos

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of service (DoS) condition on the remote access VPN services. The vulnerability is due to an issue with the remote access VPN session manager. An attacker could exploit this vulnerability by requesting an excessive number of remote access VPN sessions. An exploit could allow the attacker to cause a DoS condition.

Affected configurations

Nvd

Vulners

Node

ciscoadaptive_security_appliance_softwareRange9.4–9.4.4.34

ciscoadaptive_security_appliance_softwareRange9.5–9.6.4.25

ciscoadaptive_security_appliance_softwareRange9.7–9.8.4

ciscoadaptive_security_appliance_softwareRange9.9–9.9.2.50

ciscoadaptive_security_appliance_softwareRange9.10–9.10.1.17

AND

ciscoasa_5506-xMatch-

ciscoasa_5506h-xMatch-

ciscoasa_5506w-xMatch-

ciscoasa_5508-xMatch-

ciscoasa_5516-xMatch-

ciscoasa_5525-xMatch-

ciscoasa_5545-xMatch-

ciscoasa_5555-xMatch-

VendorProductVersionCPE
ciscoadaptive_security_appliance_software*cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
ciscoasa_5506-x-cpe:2.3:h:cisco:asa_5506-x:-:*:*:*:*:*:*:*
ciscoasa_5506h-x-cpe:2.3:h:cisco:asa_5506h-x:-:*:*:*:*:*:*:*
ciscoasa_5506w-x-cpe:2.3:h:cisco:asa_5506w-x:-:*:*:*:*:*:*:*
ciscoasa_5508-x-cpe:2.3:h:cisco:asa_5508-x:-:*:*:*:*:*:*:*
ciscoasa_5516-x-cpe:2.3:h:cisco:asa_5516-x:-:*:*:*:*:*:*:*
ciscoasa_5525-x-cpe:2.3:h:cisco:asa_5525-x:-:*:*:*:*:*:*:*
ciscoasa_5545-x-cpe:2.3:h:cisco:asa_5545-x:-:*:*:*:*:*:*:*
ciscoasa_5555-x-cpe:2.3:h:cisco:asa_5555-x:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	adaptive_security_appliance_software	*	cpe:2.3:o:cisco:adaptive_security_appliance_software::::::::
cisco	asa_5506-x	-	cpe:2.3:h:cisco:asa_5506-x:-:::::::*
cisco	asa_5506h-x	-	cpe:2.3:h:cisco:asa_5506h-x:-:::::::*
cisco	asa_5506w-x	-	cpe:2.3:h:cisco:asa_5506w-x:-:::::::*
cisco	asa_5508-x	-	cpe:2.3:h:cisco:asa_5508-x:-:::::::*
cisco	asa_5516-x	-	cpe:2.3:h:cisco:asa_5516-x:-:::::::*
cisco	asa_5525-x	-	cpe:2.3:h:cisco:asa_5525-x:-:::::::*
cisco	asa_5545-x	-	cpe:2.3:h:cisco:asa_5545-x:-:::::::*
cisco	asa_5555-x	-	cpe:2.3:h:cisco:asa_5555-x:-:::::::*

CNA Affected

[
  {
    "product": "Cisco Adaptive Security Appliance (ASA) Software",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "9.4.4.34",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.6.4.25",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.8.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.9.2.50",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.10.1.17",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.securityfocus.com/bid/108151

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-vpn-dos

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

Related for CVE-2019-1705