CVE-2014-3399

The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during creation of a SharePoint handler, which allows remote authenticated users to overwrite arbitrary RAMFS cache files or inject Lua programs, and consequently cause a denial of service (portal outage or system reload), via crafted HTTP requests, aka Bug ID CSCup54208.

• CWE-94

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3399Broken Link, Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35989Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3399Broken Link, Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35989Vendor Advisory

Published

Oct 7, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3393The Clientless SSL VPN portal customization framework in Cis…
• CVE-2014-3394The Smart Call Home (SCH) implementation in Cisco ASA Softwa…
• CVE-2014-3395Cisco WebEx Meetings Server (WMS) 2.5 allows remote attacker…
• CVE-2014-3396Cisco IOS XR on ASR 9000 devices does not properly use compr…
• CVE-2014-3397The network stack in Cisco TelePresence MCU Software before …
• CVE-2014-3398The SSL VPN implementation in Cisco Adaptive Security Applia…
• CVE-2014-3400Cisco WebEx Meetings Server allows remote authenticated user…
• CVE-2014-3402The authentication-manager process in the web framework in C…
• CVE-2014-3403The Autonomic Networking Infrastructure (ANI) component in C…
• CVE-2014-3404The Autonomic Networking Infrastructure (ANI) component in C…
• CVE-2014-3405Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power…
• CVE-2014-3406Race condition in the IP logging feature in Cisco Intrusion …