CVE-2019-1705CWE-404

Cisco Adaptive Security Appliance Software VPN Denial of Service Vulnerability

Medium · published May 3, 2019

CVSS v3.0
5.3
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

A vulnerability in the remote access VPN session manager of Cisco Adaptive Security Appliance (ASA) Software could allow a unauthenticated, remote attacker to cause a denial of service (DoS) condition on the remote access VPN services. The vulnerability is due to an issue with the remote access VPN session manager. An attacker could exploit this vulnerability by requesting an excessive number of remote access VPN sessions. An exploit could allow the attacker to cause a DoS condition.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.02039 · 81.0th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2019-05-03T16:10Z
EPSS history
Timeline
  • 03 MAY 16:10Z
    Cisco Adaptive Security Appliance Software VPN Denial of Service Vulnerability
    cvelistv5