6.8
Moyenne
CVE-2019-12693 A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an…
Description
A vulnerability in the Secure Copy (SCP) feature of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to the use of an incorrect data type for a length variable. An attacker could exploit this vulnerability by initiating the transfer of a large file to an affected device via SCP. To exploit this vulnerability, the attacker would need to have valid privilege level 15 credentials on the affected device. A successful exploit could allow the attacker to cause the length variable to roll over, which could cause the affected device to crash.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Adaptive Security Appliance (ASA) Software | Versions non publiées |
Autres CVE de Cisco Adaptive Security Appliance (ASA) Software
Les 161 CVE de Cisco Adaptive Security Appliance (ASA) Software →
CVE-2025-20363
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure…
9.0
Critique
CVE-2025-20254
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security…
5.8
Moyenne
CVE-2025-20263
A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and…
8.6
Élevée
CVE-2025-20253
A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure…
8.6
Élevée