Skip to content
COOEY

FAIL › dossier

Adaptive Security Appliance (ASA)

PRODUCT

· dossier confidence 0%

The Cisco Adaptive Security Appliance (ASA) is a network security device with a critical track record of high-severity vulnerabilities, including multiple remote code execution and denial-of-service flaws. Recent active exploitation has prompted CISA emergency directives, highlighting the need for urgent patching and enhanced monitoring of edge infrastructure.

PROFILE
Categorynetwork securityWhat they doCisco Adaptive Security Appliance (ASA) is a network security device that provides firewall, intrusion prevention, and application visibility and control services.
SECURITY POSTURE

The Cisco ASA has a documented history of high-severity vulnerabilities, including remote code execution (RCE) and denial-of-service (DoS) flaws, requiring urgent patching and CISA emergency directives.

Notable failures
  • CVE-2016-6366 RCE via SNMP buffer overflow
  • CVE-2016-6367 CLI parser DoS/RCE
  • CVE-2018-0296 HTTP URL input validation DoS
  • CVE-2014-2120 WebVPN XSS
  • CVE-2025-XXXX active exploitation requiring CISA emergency directive
Patterns: repeated unpatched edge-device RCEs; state-sponsored campaigns targeting exposed edge infrastructure
FAILURE HISTORY · 4
DATEEVENTSEVSUMMARY
2022-05-24 CVE-2016-6366 high Cisco ASA's SNMP code had a buffer overflow allowing remote code execution or system reloads.
2022-05-24 CVE-2016-6367 high Cisco ASA CLI parser flaw allowed authenticated local attackers to cause DoS or execute code.
2021-11-03 CVE-2018-0296 high Cisco ASA suffered a DoS vulnerability from improper HTTP URL input validation that was actively exploited in the wild.
2024-11-12 CVE-2014-2120 high Cisco ASA WebVPN XSS vulnerability allows remote script injection via unspecified parameter.
Open questions: What is the company name for the Cisco Adaptive Security Appliance (ASA)? · What is the company name for Asana (ASAN)? · What is the company name for Adaptive Security (adaptivesecurity.com)? · What is the company name for Microvast Holdings (MVST)?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-11 03:51:51.301665+00:00