https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 16:49:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08600 bdu:2023-08600 https://cve.radiocsirt.org/vuln/bdu:2023-08600 https://cve.radiocsirt.org/vuln/cisco-sa-asa-ssl-vpn-y88qom77 <p>A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user&#39;s source IP address. This vulnerability is due to improper validation of the packet&#39;s inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user&#39;s IP address. It is not possible for the attacker to receive return packets. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user&#39;s source IP address. This vulnerability is due to improper validation of the packet&#39;s inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user&#39;s IP address. It is not possible for the attacker to receive return packets. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-asa-ssl-vpn-y88qom77 https://cve.radiocsirt.org/vuln/euvd-2026-7974 EUVD-2026-7974 https://cve.radiocsirt.org/vuln/euvd-2026-7974 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20275 <p>A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user&#39;s source IP address. This vulnerability is due to improper validation of the packet&#39;s inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user&#39;s IP address. It is not possible for the attacker to receive return packets.</p> <p>A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user&#39;s source IP address. This vulnerability is due to improper validation of the packet&#39;s inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user&#39;s IP address. It is not possible for the attacker to receive return packets.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20275 https://cve.radiocsirt.org/vuln/ghsa-6q64-g7xj-vc8f <p>A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user&#39;s source IP address. This vulnerability is due to improper validation of the packet&#39;s inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user&#39;s IP address. It is not possible for the attacker to receive return packets.</p> <p>A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user&#39;s source IP address. This vulnerability is due to improper validation of the packet&#39;s inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user&#39;s IP address. It is not possible for the attacker to receive return packets.</p> https://cve.radiocsirt.org/vuln/ghsa-6q64-g7xj-vc8f https://cve.radiocsirt.org/vuln/gsd-2023-20275 gsd-2023-20275 https://cve.radiocsirt.org/vuln/gsd-2023-20275 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3065 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco ASA (Adaptive Security Appliance) und Cisco Firepower ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco ASA (Adaptive Security Appliance) und Cisco Firepower ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3065