Vulnerabilities fixed in Cisco products

🗓️ 10 Nov 2022 00:00:00Reported by NCSCType

Cisco fixes ASA, Firepower, Secure Firewall, and Snort vulnerabilities, including cross site scripting, denial of service, data manipulation, spoofing, and remote code execution.

Reporter	Title	Published	Views	Family All 397
ATTACKERKB	CVE-2022-20745	27 Apr 202216:00	–	attackerkb
ATTACKERKB	CVE-2022-20713	10 Aug 202223:00	–	attackerkb
BDU FSTEC	The vulnerability of the web-based service interfaces of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.	10 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Clientless SSL VPN (WebVPN) component of the Cisco Adaptive Security Appliance Software (ASA) allows a attacker to perform a “HTTP request hijacking” attack.	12 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.	2 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.	2 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the TLS implementation in Cisco Firepower Threat Defense’s microprogramming network interface devices allows attackers to gain unauthorized access to protected information.	2 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementations of TLS and SSL protocols in the microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Firepower Threat Defense (FTD) from the ASA 5500-X Series, Firepower 4100 Series, and Firepower 9300 Series allows attackers to induce service interruptions.	2 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.	2 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the secure loading mechanism of microprogramming software for Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) series of Cisco Secure Firewalls 3100 allows attackers to circumvent the secure loading mechanism.	2 Dec 202200:00	–	bdu_fstec

10 Nov 2022 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.6 - 8.8

CVSS 27.8

EPSS0.01717

SSVC