Is CVE-2014-3392 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Cisco Adaptive Security Appliance Software

CVE-2014-3392

The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.6 before 8.6(1.15), 9.0 before 9.0(4.24), 9.1 before 9.1(5.12), 9.2 before 9.2(2.8), and 9.3 before 9.3(1.1) allows remote attackers to obtain sensitive information from process memory or modify memory contents via crafted parameters, aka Bug ID CSCuq29136.

EPSS: 0.017 (74.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Adaptive_security_appliance_software — versions 8.2, 8.2.0.45, 8.2.1
N/a — versions n/a

Public proof-of-concept exploits

monsi/CRAM

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2014-3392?: CVE-2014-3392 is a vulnerability in Cisco Adaptive Security Appliance Software. Published 2014-10-10.
Is CVE-2014-3392 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.