CVE-2016-1385: The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticate...

Security readout for executives and security teams

This issue can let an authenticated user make a Cisco ASA security appliance unstable, consume memory, or reload by submitting crafted XML. It affects ASA Software through 9.5.2, based on the CVE description. Business impact is availability loss for a perimeter security device, not confirmed data theft. Exposure is most likely where Cisco ASA Software through 9.5.2 is still deployed and administrative access or Clientless SSL VPN access is available to authenticated users. Treat this as a timely availability risk for legacy Cisco ASA deployments. Prioritize internet-facing or business-critical firewalls and VPN gateways, especially where many authenticated VPN users exist. Mitigation focus: Check Cisco advisory cisco-sa-20160517-asa-xml for fixed ASA releases.; Upgrade affected Cisco ASA Software according to Cisco guidance.; Limit ASA administration access to trusted management networks and users..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.