← Vulnerability feed

Vulnerability record · CVE-2014-0653 · published 8 January 2014

CVE-2014-0653: Cisco adaptive security appliance improper input validation vulnerability

Cisco · Adaptive Security Appliance

The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340.

4.3 CVSS 2.0 Medium EPSS 6.9% · top 6.2% CWE-20 · Improper input validation
4.3CVSS 2.0 base score
6.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
17 Jun 2026Last modified by NVD

Description

The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/101834
http://secunia.com/advisories/56366
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0653 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32363 Vendor Advisory
http://www.securityfocus.com/bid/64708 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1029570 Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90165
http://osvdb.org/101834
http://secunia.com/advisories/56366
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0653 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32363 Vendor Advisory
http://www.securityfocus.com/bid/64708 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1029570 Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90165

Track CVE-2014-0653 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.6CVE-2021-34793Cisco adaptive security appliance vulnerabilityA vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in tr…EPSS 0.58%8.6CVE-2020-3572Cisco adaptive security appliance uncontrolled resource consumption vulnerabilityA vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software …EPSS 1.8%8.6CVE-2020-3436Cisco adaptive security appliance unrestricted file upload vulnerabilityA vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allo…EPSS 1.9%8.6CVE-2020-3304Cisco adaptive security appliance uncontrolled resource consumption vulnerabilityA vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an u…EPSS 3.9%7.8CVE-2013-3382Cisco adaptive security appliance improper input validation vulnerabilityThe Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive …EPSS 1.9%7.8CVE-2013-1150Cisco adaptive security appliance software improper authentication vulnerabilityThe authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31),…EPSS 2.1%7.8CVE-2013-1152Cisco adaptive security appliance software vulnerabilityCisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload…EPSS 1.9%7.8CVE-2011-0394Cisco adaptive security appliance vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8…EPSS 3.4%

Source: NIST National Vulnerability Database (record CVE-2014-0653), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.