A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper management of authenticated sessions in the WebVPN portal. An attacker could exploit this vulnerability by authenticating with valid credentials and accessing a specific URL in the WebVPN portal. A successful exploit could allow the attacker to cause the device to reload, resulting in a temporary DoS condition.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Cisco
Subscribe
|
Adaptive Security Appliance Software
Subscribe
Asa 5505
Subscribe
Asa 5510
Subscribe
Asa 5512-x
Subscribe
Asa 5515-x
Subscribe
Asa 5520
Subscribe
Asa 5525-x
Subscribe
Asa 5540
Subscribe
Asa 5545-x
Subscribe
Asa 5550
Subscribe
Asa 5555-x
Subscribe
Asa 5580
Subscribe
Asa 5585-x
Subscribe
Firepower Threat Defense
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2019-10250 | A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper management of authenticated sessions in the WebVPN portal. An attacker could exploit this vulnerability by authenticating with valid credentials and accessing a specific URL in the WebVPN portal. A successful exploit could allow the attacker to cause the device to reload, resulting in a temporary DoS condition. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 21 Nov 2024 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: cisco
Published:
Updated: 2024-11-21T19:35:46.198Z
Reserved: 2018-12-06T00:00:00
Link: CVE-2019-1693
Updated: 2024-08-04T18:28:41.635Z
Status : Modified
Published: 2019-05-03T15:29:00.977
Modified: 2024-11-21T04:37:06.883
Link: CVE-2019-1693
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD