[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5Q32LTIny8ltU6RjMg7M0NAPjcOUmjjFXa89IvIZO0I":3,"g5a-ex:cisco\u002Fasa_5515-x_firmware@*":226,"g5a-family:cisco\u002Fasa_5515-x_firmware":228},{"success":4,"data":5},true,{"product":6,"versions":108,"topVulnerabilitiesByEpss":154,"kevVulnerabilities":203,"seoMetadata":204,"meta":223},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":107},"cisco","asa_5515-x_firmware",45,25,0,"2022-06-24",[14,18,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"009.008",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"009.008\\(004.025\\)",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"009.009",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"009.009\\(002.085\\)",{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},"009.012",{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},"009.012\\(004.024\\)",{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},"009.014\\(001\\)",{"version":32,"cve_count":20,"kev_count":11,"has_kev":17},"009.014\\(001.150\\)",{"version":34,"cve_count":20,"kev_count":11,"has_kev":17},"009.014\\(002.106\\)",{"version":36,"cve_count":16,"kev_count":11,"has_kev":17},"009.015",{"version":38,"cve_count":20,"kev_count":11,"has_kev":17},"009.015\\(001\\)",{"version":40,"cve_count":20,"kev_count":11,"has_kev":17},"009.015\\(001.015\\)",{"version":42,"cve_count":20,"kev_count":11,"has_kev":17},"009.015\\(001.016\\)",{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},"009.016\\(001\\)",{"version":46,"cve_count":16,"kev_count":11,"has_kev":17},"009.016\\(001.025\\)",{"version":48,"cve_count":20,"kev_count":11,"has_kev":17},"099.015\\(001.033\\)",{"version":50,"cve_count":20,"kev_count":11,"has_kev":17},"099.016\\(001.216\\)",{"version":52,"cve_count":20,"kev_count":11,"has_kev":17},"099.017\\(001.211\\)",{"version":54,"cve_count":20,"kev_count":11,"has_kev":17},"099.017\\(001.220\\)",{"version":56,"cve_count":20,"kev_count":11,"has_kev":17},"099.017\\(015.050\\)",{"version":58,"cve_count":20,"kev_count":11,"has_kev":17},"100.13\\(0\\)",{"version":60,"cve_count":20,"kev_count":11,"has_kev":17},"101.5\\(1.26\\)",{"version":62,"cve_count":20,"kev_count":11,"has_kev":17},"101.6\\(1.96\\)",{"version":64,"cve_count":20,"kev_count":11,"has_kev":17},"201.4\\(1.21\\)",{"version":66,"cve_count":20,"kev_count":11,"has_kev":17},"201.5\\(23.16\\)",{"version":68,"cve_count":20,"kev_count":11,"has_kev":17},"8.4\\(1\\)",{"version":70,"cve_count":20,"kev_count":11,"has_kev":17},"9.10\\(1.220\\)",{"version":72,"cve_count":16,"kev_count":11,"has_kev":17},"9.10\\(1.3\\)",{"version":74,"cve_count":11,"kev_count":11,"has_kev":17},"9.12\\(0.61\\)",{"version":76,"cve_count":20,"kev_count":11,"has_kev":17},"9.12\\(1.6\\)",{"version":78,"cve_count":20,"kev_count":11,"has_kev":17},"9.12\\(2\\)",{"version":80,"cve_count":20,"kev_count":11,"has_kev":17},"9.12\\(2.12\\)",{"version":82,"cve_count":20,"kev_count":11,"has_kev":17},"9.13\\(0.33\\)",{"version":84,"cve_count":20,"kev_count":11,"has_kev":17},"9.4\\(1\\)",{"version":86,"cve_count":20,"kev_count":11,"has_kev":17},"9.4\\(4\\)",{"version":88,"cve_count":20,"kev_count":11,"has_kev":17},"9.6\\(4\\)",{"version":90,"cve_count":20,"kev_count":11,"has_kev":17},"96.4\\(0.42\\)",{"version":92,"cve_count":11,"kev_count":11,"has_kev":17},"9.8\\(2.20\\)",{"version":94,"cve_count":20,"kev_count":11,"has_kev":17},"9.8\\(3\\)",{"version":96,"cve_count":20,"kev_count":11,"has_kev":17},"9.8\\(4.18\\)",{"version":98,"cve_count":16,"kev_count":11,"has_kev":17},"9.9\\(2\\)",{"version":100,"cve_count":20,"kev_count":11,"has_kev":17},"9.9\\(2.21\\)",{"version":102,"cve_count":20,"kev_count":11,"has_kev":17},"9.9\\(2.4\\)",{"version":104,"cve_count":20,"kev_count":11,"has_kev":17},"9.9\\(2.52\\)",{"version":106,"cve_count":20,"kev_count":11,"has_kev":17},"9.9\\(2.55\\)","Asa 5515-x Firmware by Cisco is a technology product with 45 tracked versions and 25 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},{"version":32,"cve_count":20,"kev_count":11,"has_kev":17},{"version":34,"cve_count":20,"kev_count":11,"has_kev":17},{"version":36,"cve_count":16,"kev_count":11,"has_kev":17},{"version":38,"cve_count":20,"kev_count":11,"has_kev":17},{"version":40,"cve_count":20,"kev_count":11,"has_kev":17},{"version":42,"cve_count":20,"kev_count":11,"has_kev":17},{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},{"version":46,"cve_count":16,"kev_count":11,"has_kev":17},{"version":48,"cve_count":20,"kev_count":11,"has_kev":17},{"version":50,"cve_count":20,"kev_count":11,"has_kev":17},{"version":52,"cve_count":20,"kev_count":11,"has_kev":17},{"version":54,"cve_count":20,"kev_count":11,"has_kev":17},{"version":56,"cve_count":20,"kev_count":11,"has_kev":17},{"version":58,"cve_count":20,"kev_count":11,"has_kev":17},{"version":60,"cve_count":20,"kev_count":11,"has_kev":17},{"version":62,"cve_count":20,"kev_count":11,"has_kev":17},{"version":64,"cve_count":20,"kev_count":11,"has_kev":17},{"version":66,"cve_count":20,"kev_count":11,"has_kev":17},{"version":68,"cve_count":20,"kev_count":11,"has_kev":17},{"version":70,"cve_count":20,"kev_count":11,"has_kev":17},{"version":72,"cve_count":16,"kev_count":11,"has_kev":17},{"version":74,"cve_count":11,"kev_count":11,"has_kev":17},{"version":76,"cve_count":20,"kev_count":11,"has_kev":17},{"version":78,"cve_count":20,"kev_count":11,"has_kev":17},{"version":80,"cve_count":20,"kev_count":11,"has_kev":17},{"version":82,"cve_count":20,"kev_count":11,"has_kev":17},{"version":84,"cve_count":20,"kev_count":11,"has_kev":17},{"version":86,"cve_count":20,"kev_count":11,"has_kev":17},{"version":88,"cve_count":20,"kev_count":11,"has_kev":17},{"version":90,"cve_count":20,"kev_count":11,"has_kev":17},{"version":92,"cve_count":11,"kev_count":11,"has_kev":17},{"version":94,"cve_count":20,"kev_count":11,"has_kev":17},{"version":96,"cve_count":20,"kev_count":11,"has_kev":17},{"version":98,"cve_count":16,"kev_count":11,"has_kev":17},{"version":100,"cve_count":20,"kev_count":11,"has_kev":17},{"version":102,"cve_count":20,"kev_count":11,"has_kev":17},{"version":104,"cve_count":20,"kev_count":11,"has_kev":17},{"version":106,"cve_count":20,"kev_count":11,"has_kev":17},[155,163,169,174,179,184,188,192,196,199],{"cveId":156,"description":157,"publishedDate":158,"cvssScore":159,"cvssVersion":160,"severity":161,"isKev":17,"epssScore":162},"CVE-2020-3187","A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to sensitive files on a targeted system. The vulnerability is due to a lack of proper input validation of the HTTP URL. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences. An exploit could allow the attacker to view or delete arbitrary files on the targeted system. When the device is reloaded after exploitation of this vulnerability, any files that were deleted are restored. The attacker can only view and delete files within the web services file system. This file system is enabled when the affected device is configured with either WebVPN or AnyConnect features. This vulnerability can not be used to obtain access to ASA or FTD system files or underlying operating system (OS) files. Reloading the affected device will restore all files within the web services file system.","2020-05-06",9.1,"v3.1","Critical",0.96595,{"cveId":164,"description":165,"publishedDate":12,"cvssScore":166,"cvssVersion":160,"severity":167,"isKev":17,"epssScore":168},"CVE-2022-20829","A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker with administrative privileges to upload an ASDM image that contains malicious code to a device that is running Cisco ASA Software. This vulnerability is due to insufficient validation of the authenticity of an ASDM image during its installation on a device that is running Cisco ASA Software. An attacker could exploit this vulnerability by installing a crafted ASDM image on the device that is running Cisco ASA Software and then waiting for a targeted user to access that device using ASDM. A successful exploit could allow the attacker to execute arbitrary code on the machine of the targeted user with the privileges of that user on that machine. Notes: To successfully exploit this vulnerability, the attacker must have administrative privileges on the device that is running Cisco ASA Software. Potential targets are limited to users who manage the same device that is running Cisco ASA Software using ASDM. Cisco has released and will release software updates that address this vulnerability.",7.2,"High",0.03412,{"cveId":170,"description":171,"publishedDate":158,"cvssScore":172,"cvssVersion":160,"severity":161,"isKev":17,"epssScore":173},"CVE-2020-3125","A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and bypass authentication on an affected device that is configured to perform Kerberos authentication for VPN or local device access. The vulnerability is due to insufficient identity verification of the KDC when a successful authentication response is received. An attacker could exploit this vulnerability by spoofing the KDC server response to the ASA device. This malicious response would not have been authenticated by the KDC. A successful attack could allow an attacker to bypass Kerberos authentication.",9.8,0.02417,{"cveId":175,"description":176,"publishedDate":158,"cvssScore":177,"cvssVersion":160,"severity":167,"isKev":17,"epssScore":178},"CVE-2020-3283","A vulnerability in the Secure Sockets Layer (SSL)\u002FTransport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software when running on the Cisco Firepower 1000 Series platform could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to a communication error between internal functions. An attacker could exploit this vulnerability by sending a crafted SSL\u002FTLS message to an affected device. A successful exploit could allow the attacker to cause a buffer underrun, which leads to a crash. The crash causes the affected device to reload.",8.6,0.02021,{"cveId":180,"description":181,"publishedDate":158,"cvssScore":182,"cvssVersion":160,"severity":167,"isKev":17,"epssScore":183},"CVE-2020-3179","A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory handling error when GRE over IPv6 traffic is processed. An attacker could exploit this vulnerability by sending crafted GRE over IPv6 packets with either IPv4 or IPv6 payload through an affected device. A successful exploit could allow the attacker to cause the device to crash, resulting in a DoS condition.",7.5,0.02,{"cveId":185,"description":186,"publishedDate":158,"cvssScore":182,"cvssVersion":160,"severity":167,"isKev":17,"epssScore":187},"CVE-2020-3254","Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerabilities are due to inefficient memory management. An attacker could exploit these vulnerabilities by sending crafted MGCP packets through an affected device. An exploit could allow the attacker to cause memory exhaustion resulting in a restart of an affected device, causing a DoS condition for traffic traversing the device.",0.01983,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":177,"cvssVersion":160,"severity":167,"isKev":17,"epssScore":187},"CVE-2019-15256","A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper management of system memory. An attacker could exploit this vulnerability by sending malicious IKEv1 traffic to an affected device. The attacker does not need valid credentials to authenticate the VPN session, nor does the attacker's source address need to match a peer statement in the crypto map applied to the ingress interface of the affected device. An exploit could allow the attacker to exhaust system memory resources, leading to a reload of an affected device.","2019-10-02",{"cveId":193,"description":194,"publishedDate":158,"cvssScore":182,"cvssVersion":160,"severity":167,"isKev":17,"epssScore":195},"CVE-2020-3195","A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to incorrect processing of certain OSPF packets. An attacker could exploit this vulnerability by sending a series of crafted OSPF packets to be processed by an affected device. A successful exploit could allow the attacker to continuously consume memory on an affected device and eventually cause it to reload, resulting in a denial of service (DoS) condition.",0.01936,{"cveId":197,"description":198,"publishedDate":158,"cvssScore":177,"cvssVersion":160,"severity":167,"isKev":17,"epssScore":195},"CVE-2020-3196","A vulnerability in the Secure Sockets Layer (SSL)\u002FTransport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaust memory resources on the affected device, leading to a denial of service (DoS) condition. The vulnerability is due to improper resource management for inbound SSL\u002FTLS connections. An attacker could exploit this vulnerability by establishing multiple SSL\u002FTLS connections with specific conditions to the affected device. A successful exploit could allow the attacker to exhaust the memory on the affected device, causing the device to stop accepting new SSL\u002FTLS connections and resulting in a DoS condition for services on the device that process SSL\u002FTLS traffic. Manual intervention is required to recover an affected device.",{"cveId":200,"description":201,"publishedDate":158,"cvssScore":177,"cvssVersion":160,"severity":167,"isKev":17,"epssScore":202},"CVE-2020-3191","A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper length validation of a field in an IPv6 DNS packet. An attacker could exploit this vulnerability by sending a crafted DNS query over IPv6, which traverses the affected device. An exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. This vulnerability is specific to DNS over IPv6 traffic only.",0.0188,[],{"title":205,"metaDescription":206,"keywords":207,"structuredData":208},"Asa 5515-x Firmware by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Asa 5515-x Firmware by Cisco covering 45 versions with 25 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Asa 5515-x Firmware vulnerabilities, Asa 5515-x Firmware security, Asa 5515-x Firmware CVE, Cisco Asa 5515-x Firmware, Asa 5515-x Firmware threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":209,"@type":210,"name":211,"description":206,"url":212,"manufacturer":213,"applicationCategory":217,"softwareVersion":218,"mainEntity":219},"https:\u002F\u002Fschema.org","SoftwareApplication","Asa 5515-x Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fasa_5515-x_firmware",{"@type":214,"name":215,"url":216},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","45 versions tracked",{"@type":220,"name":221,"description":222,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Asa 5515-x Firmware Security Vulnerabilities","Security vulnerabilities affecting Asa 5515-x Firmware by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":224,"apiVersion":225},"2026-10-19T00:09:48.397Z","3.0",{"rows":227,"total":11,"capped":17,"failed":11},[],[]]