BDU:2025-00123

Опубликовано: 18 мар. 2014

Источник: fstec

CVSS3: 6.1

CVSS2: 6.4

EPSS Средний

Описание

Уязвимость веб-сервера VPN микропрограммного обеспечения межсетевых экранов Cisco Adaptive Security Appliance (ASA) существует из-за непринятия мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, провести атаку межсайтового скриптинга (XSS)

Вендор

Cisco Systems Inc.

Наименование ПО

Adaptive Security Appliance

Версия ПО

8.0.2.11 (Adaptive Security Appliance)

8.0.4 (Adaptive Security Appliance)

8.0.3 (Adaptive Security Appliance)

8.0.2 (Adaptive Security Appliance)

8.0.1.2 (Adaptive Security Appliance)

8.0.4.25 (Adaptive Security Appliance)

8.0.4.28 (Adaptive Security Appliance)

8.0.4.33 (Adaptive Security Appliance)

8.0.4.32 (Adaptive Security Appliance)

8.0.5 (Adaptive Security Appliance)

8.0.2.15 (Adaptive Security Appliance)

8.0.3.6 (Adaptive Security Appliance)

8.0.3.12 (Adaptive Security Appliance)

8.0.3.19 (Adaptive Security Appliance)

8.0.4.3 (Adaptive Security Appliance)

8.0.4.9 (Adaptive Security Appliance)

8.0.4.16 (Adaptive Security Appliance)

8.0.4.23 (Adaptive Security Appliance)

8.0.4.31 (Adaptive Security Appliance)

8.0.5.20 (Adaptive Security Appliance)

8.0.5.23 (Adaptive Security Appliance)

8.0.5.25 (Adaptive Security Appliance)

8.0.5.27 (Adaptive Security Appliance)

8.0.5.28 (Adaptive Security Appliance)

8.0.5.31 (Adaptive Security Appliance)

8.2.0.45 (Adaptive Security Appliance)

8.2.1 (Adaptive Security Appliance)

8.2.2 (Adaptive Security Appliance)

8.2.2.10 (Adaptive Security Appliance)

8.2.3 (Adaptive Security Appliance)

8.2.4 (Adaptive Security Appliance)

8.2.1.11 (Adaptive Security Appliance)

8.2.2.9 (Adaptive Security Appliance)

8.2.2.12 (Adaptive Security Appliance)

8.2.2.16 (Adaptive Security Appliance)

8.2.4.1 (Adaptive Security Appliance)

8.2.4.4 (Adaptive Security Appliance)

8.2.5 (Adaptive Security Appliance)

8.2.5.13 (Adaptive Security Appliance)

8.2.5.22 (Adaptive Security Appliance)

8.2.5.26 (Adaptive Security Appliance)

8.2.2.17 (Adaptive Security Appliance)

8.2.5.33 (Adaptive Security Appliance)

8.2.5.40 (Adaptive Security Appliance)

8.2.5.41 (Adaptive Security Appliance)

8.2.5.46 (Adaptive Security Appliance)

8.1.1 (Adaptive Security Appliance)

8.1.2 (Adaptive Security Appliance)

8.1.2.15 (Adaptive Security Appliance)

8.1.2.16 (Adaptive Security Appliance)

8.1.2.19 (Adaptive Security Appliance)

8.1.2.23 (Adaptive Security Appliance)

8.1.2.24 (Adaptive Security Appliance)

8.1.2.50 (Adaptive Security Appliance)

8.1.1.6 (Adaptive Security Appliance)

8.1.2.13 (Adaptive Security Appliance)

8.1.2.49 (Adaptive Security Appliance)

8.1.2.55 (Adaptive Security Appliance)

8.1.2.56 (Adaptive Security Appliance)

8.3.1.1 (Adaptive Security Appliance)

8.3.1 (Adaptive Security Appliance)

8.3.2 (Adaptive Security Appliance)

8.3.2.23 (Adaptive Security Appliance)

8.3.2.25 (Adaptive Security Appliance)

8.3.1.4 (Adaptive Security Appliance)

8.3.1.6 (Adaptive Security Appliance)

8.3.2.4 (Adaptive Security Appliance)

8.3.2.13 (Adaptive Security Appliance)

8.3.2.31 (Adaptive Security Appliance)

8.3.2.33 (Adaptive Security Appliance)

8.3.2.34 (Adaptive Security Appliance)

8.3.2.37 (Adaptive Security Appliance)

8.3.2.39 (Adaptive Security Appliance)

8.4.1 (Adaptive Security Appliance)

8.4.2 (Adaptive Security Appliance)

8.4.1.3 (Adaptive Security Appliance)

8.4.1.11 (Adaptive Security Appliance)

8.4.2.8 (Adaptive Security Appliance)

8.4.3 (Adaptive Security Appliance)

8.4.3.8 (Adaptive Security Appliance)

8.4.3.9 (Adaptive Security Appliance)

8.4.4 (Adaptive Security Appliance)

8.4.4.1 (Adaptive Security Appliance)

8.4.4.3 (Adaptive Security Appliance)

8.4.4.5 (Adaptive Security Appliance)

8.4.4.9 (Adaptive Security Appliance)

8.4.5 (Adaptive Security Appliance)

8.4.5.6 (Adaptive Security Appliance)

8.4.6 (Adaptive Security Appliance)

8.4.2.1 (Adaptive Security Appliance)

8.4.7 (Adaptive Security Appliance)

9.0.1 (Adaptive Security Appliance)

9.0.2 (Adaptive Security Appliance)

9.0.2.10 (Adaptive Security Appliance)

9.0.3 (Adaptive Security Appliance)

9.0.3.6 (Adaptive Security Appliance)

9.1.1 (Adaptive Security Appliance)

9.1.1.4 (Adaptive Security Appliance)

9.1.2 (Adaptive Security Appliance)

9.1.3 (Adaptive Security Appliance)

9.1.2.8 (Adaptive Security Appliance)

Тип ПО

ПО сетевого программно-аппаратного средства

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Средний уровень опасности (базовая оценка CVSS 2.0 составляет 6,4)

Средний уровень опасности (базовая оценка CVSS 3.0 составляет 6,1)

Возможные меры по устранению уязвимости

Использование рекомендаций производителя:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2120
CVE

EPSS

Процентиль: 99%

0.69042

Средний

6.1 Medium

CVSS3

6.4 Medium

CVSS2

Связанные уязвимости

CVE-2014-2120

CVSS3: 6.1

nvd

почти 12 лет назад

Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.

GHSA-5g9m-4pr5-x8v5

CVSS3: 5.4

github

больше 3 лет назад