CVE-2019-1944
published 2019-08-07CVE-2019-1944: Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate…
PriorityP434high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
EPSS
0.27%
19.6th percentile
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these vulnerabilities, see the Details section of this security advisory.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_smart_tunnel | — | — |
| cisco | adaptive_security_appliance_software | < 9.4.4.37 | 9.4.4.37 |
| cisco | cisco_adaptive_security_appliance_software | >= unspecified < 9.8.4.7 | 9.8.4.7 |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
nvdv3.06.7MEDIUMCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
vendor_cisco6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities
vendor_cisco·2019-08-07·CVSS 6.7
CVE-2019-1944 [MEDIUM] CWE-20 Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities
Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established.
For more information about these vulnerabilities, see the Details section of this security advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-asa-multi
Cisco
Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities
vendor_cisco·CVSS 3.0
CVE-2019-1944 Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities
CVE-2019-1944: Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these vulnerabilities, see the
CVSS: 3.0
CWE: CWE-20, CWE-732, CWE-20, CWE-732
Bug IDs: CSCvo78789
GHSA
GHSA-9v87-xxx7-v2h6: Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to
ghsa_unreviewed·2022-05-24
CVE-2019-1944 [HIGH] GHSA-9v87-xxx7-v2h6: Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these vulnerabilities, see the Details section of this security advisory.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-08-07
Published