CVE-2014-3392

Cisco Adaptive Security Appliance Software 8.2-9.3 - Memory Corruption via Clientless SSL VPN Portal Parameters

Title source: llm
STIX 2.1

Description

The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows remote attackers to obtain sensitive information from process memory or modify memory contents via crafted parameters, aka Bug ID CSCuq29136.

References (1)

Core 1
Core References

Scores

EPSS 0.0167
EPSS Percentile 74.3%

Details

Status published
Products (50)
cisco/adaptive_security_appliance_software 8.2
cisco/adaptive_security_appliance_software 8.2.0.45
cisco/adaptive_security_appliance_software 8.2.1
cisco/adaptive_security_appliance_software 8.2.1.1
cisco/adaptive_security_appliance_software 8.2.2
cisco/adaptive_security_appliance_software 8.2.2.10
cisco/adaptive_security_appliance_software 8.2.2.12
cisco/adaptive_security_appliance_software 8.2.2.16
cisco/adaptive_security_appliance_software 8.2.2.17
cisco/adaptive_security_appliance_software 8.2.3
... and 40 more
Published Oct 10, 2014
Tracked Since Feb 18, 2026