VULNERABILITY INTELLIGENCE

CVE-2014-3392

CVSS score8.3 HIGH
EPSS probability1.67%
CISA KEVNot currently listed
Published2014-10-10
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:C

Description

The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows remote attackers to obtain sensitive information from process memory or modify memory contents via crafted parameters, aka Bug ID CSCuq29136.

Primary references