Vulnerabilities fixed in Cisco Adaptive Security Appliance and Firepower Threat Defense

🗓️ 24 Oct 2024 08:37:15Reported by NCSCType

Cisco fixed vulnerabilities in Adaptive Security Appliance and Firepower Threat Defense to prevent denial of service and code execution; updates released.

Reporter	Title	Published	Views	Family All 142
BDU FSTEC	The vulnerability of VPN-client microprogramming software for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to execute cross-site scripting attacks.	31 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VPN Secure Sockets Layer (SSL) function of the microprogramming network interface devices of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.	31 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Remote Access VPN function in microprogramming-based network interface devices of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.	31 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NSG function of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense microprogramming systems allows attackers to circumvent existing security restrictions.	1 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) relates to pointer arithmetic errors, which allow attackers to trigger service failures.	1 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the TLS function in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.	1 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the TLS processing function in Cisco Firepower Threat Defense’s microprogramming system allows a attacker to induce a service failure.	6 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort module of the microprogramming software for Cisco Firepower Threat Defense (FTD) allows a perpetrator to trigger a service failure.	6 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web-client VPN microprogramming system used by Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.	6 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web client VPN microprogramming system for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to execute cross-site scripting (XSS) attacks.	6 Dec 202400:00	–	bdu_fstec

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-tls-CWY6zXB
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-vpn-cZf8gT
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-9FgEyHsF
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-nsgacl-bypass-77XnEAsL
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-dos-hOnB9pH4
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-xss-yjj7ZjVq
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-dos-QXYE5Ufy
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd2100-snort-dos-M9HuMt75
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sa-ftd-snort-fw-BCJTZPMu
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-rce-gRAuPEUF

24 Oct 2024 08:37Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18.6 - 9.9

EPSS0.01158

SSVC