GCVE - cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*

part: h version: 7.0 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Asa 5500 (`ff3d093f-75b2-54b1-bb4b-7c7e05dfbc89`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-0149`	vulnerable	2026-06-08 05:03:02.114375	Details available The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39795. Published: 2013-08-03T01:00:00.000Z Updated: 2024-08-06T14:18:09.198Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospf http://www.kb.cert.org/vuls/id/229804	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0962`	vulnerable	2026-06-08 04:49:33.910716	Details available Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic. Published: 2007-02-16T00:00:00.000Z Updated: 2024-08-07T12:34:21.308Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/0608 http://secunia.com/advisories/24180 http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml http://securitytracker.com/id?1017651 http://www.securityfocus.com/bid/22561	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0961`	vulnerable	2026-06-08 04:49:33.905514	Details available Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets. Published: 2007-02-16T00:00:00.000Z Updated: 2024-08-07T12:34:21.377Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/0608 http://secunia.com/advisories/24180 http://osvdb.org/33054 https://exchange.xforce.ibmcloud.com/vulnerabilities/32501 http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3073`	vulnerable	2026-06-08 04:49:08.237408	Details available Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via the domain parameter in (1) dnserror.html and (2) connecterror.html, aka bugid CSCsd81095 (VPN3k) and CSCse48193 (ASA). NOTE: the vendor states that "WebVPN full-network-access mode" is not affected, despite the claims by the original researcher. Published: 2006-06-19T10:00:00.000Z Updated: 2024-08-07T18:16:05.521Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/436479/30/0/threaded http://secunia.com/advisories/20644 http://www.osvdb.org/26454 http://www.osvdb.org/26453 http://www.vupen.com/english/advisories/2006/2331	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.