CVE-2019-1705
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD
Description
A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of service (DoS) condition on the remote access VPN services. The vulnerability is due to an issue with the remote access VPN session manager. An attacker could exploit this vulnerability by requesting an excessive number of remote access VPN sessions. An exploit could allow the attacker to cause a DoS condition.
Affected (5)
Products: Cisco: Adaptive Security Appliance Software
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 9.10 to 9.10.1.17 |
| Running on/with | Platform Versions |
|---|---|
Cisco Asa 5506 X | All versions |
Cisco Asa 5506h X | All versions |
Cisco Asa 5506w X | All versions |
Cisco Asa 5508 X | All versions |
Cisco Asa 5516 X | All versions |
Cisco Asa 5525 X | All versions |
Cisco Asa 5545 X | All versions |
Cisco Asa 5555 X | All versions |
References (4)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.