A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper management of authenticated sessions in the WebVPN portal. An attacker could exploit this vulnerability by authenticating with valid credentials and accessing a specific URL in the WebVPN portal. A successful exploit could allow the attacker to cause the device to reload, resulting in a temporary DoS condition.

Project Subscriptions

Vendors Products
Adaptive Security Appliance Software Subscribe
Asa 5505 Subscribe
Asa 5510 Subscribe
Asa 5512-x Subscribe
Asa 5515-x Subscribe
Asa 5520 Subscribe
Asa 5525-x Subscribe
Asa 5540 Subscribe
Asa 5545-x Subscribe
Asa 5550 Subscribe
Asa 5555-x Subscribe
Asa 5580 Subscribe
Asa 5585-x Subscribe
Firepower Threat Defense Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2019-10250 A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper management of authenticated sessions in the WebVPN portal. An attacker could exploit this vulnerability by authenticating with valid credentials and accessing a specific URL in the WebVPN portal. A successful exploit could allow the attacker to cause the device to reload, resulting in a temporary DoS condition.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 21 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-11-21T19:35:46.198Z

Reserved: 2018-12-06T00:00:00

Link: CVE-2019-1693

cve-icon Vulnrichment

Updated: 2024-08-04T18:28:41.635Z

cve-icon NVD

Status : Modified

Published: 2019-05-03T15:29:00.977

Modified: 2024-11-21T04:37:06.883

Link: CVE-2019-1693

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses