Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCisco 7604
HWCiscowszystkie wersjeCisco 7606 S
HWCiscowszystkie wersjeCisco 7609 S
HWCiscowszystkie wersjeCisco 7613 S
HWCiscowszystkie wersjeCisco Adaptive Security Appliance Software
OSCisco9.6.0 – 9.6.1\(11\) (bez)9.1.1 – 9.1.7\(9\) (bez)9.2.0 – 9.2.4\(14\) (bez)9.3.0 – 9.3.3\(10\) (bez)9.4.0.115 – 9.4.3\(8\) (bez)9.5.0 – 9.5\(3\)7.2.1 – 9.0.4.40 (bez)Cisco Asa 1000v Cloud Firewall Software
OSCisco8.7.18.7.1.1Cisco Asa 5500
HWCiscowszystkie wersjeCisco Asa 5500 Csc Ssm
HWCiscowszystkie wersjeCisco Asa 5500 X
HWCiscowszystkie wersjeCisco Asa 5505
HWCiscowszystkie wersjeCisco Asa 5506h X
HWCiscowszystkie wersjeCisco Asa 5506w X
HWCiscowszystkie wersjeCisco Asa 5506 X
HWCiscowszystkie wersjeCisco Asa 5508 X
HWCiscowszystkie wersjeCisco Asa 5510
HWCiscowszystkie wersjeCisco Asa 5512 X
HWCiscowszystkie wersjeCisco Asa 5515 X
HWCiscowszystkie wersjeCisco Asa 5516 X
HWCiscowszystkie wersjeCisco Asa 5520
HWCiscowszystkie wersjeCisco Asa 5525 X
HWCiscowszystkie wersjeCisco Asa 5540
HWCiscowszystkie wersjeCisco Asa 5545 X
HWCiscowszystkie wersjeCisco Asa 5550
HWCiscowszystkie wersjeCisco Asa 5555 X
HWCiscowszystkie wersjeCisco Asa 5580
HWCiscowszystkie wersjeCisco Asa 5585 X
HWCiscowszystkie wersjeCisco Catalyst 6500
HWCiscowszystkie wersjeCisco Catalyst 6500 E
HWCiscowszystkie wersjeCisco Catalyst 6503 E
HWCiscowszystkie wersjeCisco Catalyst 6504 E
HWCiscowszystkie wersje
CISA KEV — detailsi
- Vendori
- Cisco ↗
- Producti
- Adaptive Security Appliance (ASA)
- Added to KEVi
- May 24, 2022
- Remediation deadline (US Federal)i
- June 14, 2022(overdue)
Apply updates per vendor instructions.
A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.
Related vulnerabilities
RCE jako root w Cisco ASA i FTD poprzez podatny serwer VPN web
RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP
RCE w podsystemie SSH Cisco ASA — wykonanie poleceń jako root
A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of...
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fi...