https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:14:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10839 bdu:2024-10839 https://cve.radiocsirt.org/vuln/bdu:2024-10839 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0919 certfr-2024-avi-0919 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0919 https://cve.radiocsirt.org/vuln/cisco-sa-asa-ssh-rce-graupeuf <p>A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by submitting crafted input when executing remote CLI commands over SSH. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges. An attacker with limited user privileges could use this vulnerability to gain complete control over the system. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is part of the October 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication [&#34;https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75300&#34;].</p> <p>A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by submitting crafted input when executing remote CLI commands over SSH. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges. An attacker with limited user privileges could use this vulnerability to gain complete control over the system. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is part of the October 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication [&#34;https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75300&#34;].</p> https://cve.radiocsirt.org/vuln/cisco-sa-asa-ssh-rce-graupeuf https://cve.radiocsirt.org/vuln/cnvd-2024-44494 cnvd-2024-44494 https://cve.radiocsirt.org/vuln/cnvd-2024-44494 https://cve.radiocsirt.org/vuln/euvd-2026-197945 EUVD-2026-197945 https://cve.radiocsirt.org/vuln/euvd-2026-197945 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20329 <p>A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by submitting crafted input when executing remote CLI commands over SSH. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges. An attacker with limited user privileges could use this vulnerability to gain complete control over the system.</p> <p>A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by submitting crafted input when executing remote CLI commands over SSH. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges. An attacker with limited user privileges could use this vulnerability to gain complete control over the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20329 https://cve.radiocsirt.org/vuln/ghsa-5xm6-h565-q6mc <p>A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root.</p> <p>This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by submitting crafted input when executing remote CLI commands over SSH. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges. An attacker with limited user privileges could use this vulnerability to gain complete control over the system.</p> <p>A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root.</p> <p>This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by submitting crafted input when executing remote CLI commands over SSH. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges. An attacker with limited user privileges could use this vulnerability to gain complete control over the system.</p> https://cve.radiocsirt.org/vuln/ghsa-5xm6-h565-q6mc https://cve.radiocsirt.org/vuln/gsd-2024-20329 gsd-2024-20329 https://cve.radiocsirt.org/vuln/gsd-2024-20329 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3261 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Cisco ASA (Adaptive Security Appliance) ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen und einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Cisco ASA (Adaptive Security Appliance) ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen und einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3261