Vulnerability fixed in Cisco ASA and Firepower systems

Cisco has fixed a vulnerability in Adaptive Security Appliance and Firepower Threat Defense. The vulnerability is located in the way the Remote Access VPN handles login attempts, allowing a malicious party to use brute-force access to user accounts and potentially take over the system. take over...

CVE-2023-20269

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...

PT-2023-8563

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software affected versions not specified Description A vulnerability exists in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and...

CVE-2023-20269: Authentication Bypass Using an Alternate Path or Channel

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or ...

VulnCheck KEV: CVE-2023-20269

Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN...

The vulnerability of the TCP protocol implementation in microsoftware for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a perpetrator to trigger a service failure due to uncontrolled resource consumption.

The vulnerability of the TCP protocol implementation in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD software relates to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability in the WebVPN management web interface of the microprogramming software for Cisco Adaptive Security Appliances (ASA) allows a attacker to execute XSS attacks.

The vulnerability in the WebVPN management web interface of the microprogramming software for Cisco Adaptive Security Appliances exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Cisco Adaptive Security Appliance Software SNMP DoS (cisco-sa-asaftd-snmp-dos-qsqBNM6x)

According to its self-reported version, Cisco ASA Software is affected by a denial of service DoS vulnerability in the Simple Network Management Protocol SNMP feature of Cisco Adaptive Security Appliance ASA Software. Due to insufficient input validation, an authenticated, remote attacker could...

The vulnerability of the implementations of TLS and SSL protocols in microprogrammable network interface devices from Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) series 2100 allows attackers to induce service interruptions.

The vulnerability of the implementations of TLS and SSL protocols in microprogrammable network interface devices from Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD series 2100 is related to insufficient validation of input data. Exploiting this vulnerability can all...

多款Cisco产品 安全漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A security vulnerability exists in Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software that stems from a vulnerability in the hardware-based...

Cisco Adaptive Security Appliance Software Low Entropy Keys (cisco-sa-asa5500x-entropy-6v9bHVYP)

A vulnerability in the deterministic random bit generator DRBG, also known as pseudorandom number generator PRNG in Cisco Adaptive Security Appliance ASA Software for Cisco ASA 5506-X, ASA-5508-X and ASA 5516-X Firewalls could allow an unauthenticated, remote attacker to cause a cryptographic...

PT-2023-2257 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions prior to the fixed version Cisco Firepower Threat Defense FTD Software versions prior to the fixed version Description: The issue is related to the deterministic random bit generator DRB...

The vulnerability of the authentication and authorization processes for VPN connections of microprogramming network interfaces of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) is related to access control deficiencies, allowing attackers to gain access to the system under another user’s name.

The vulnerability of the authentication and authorization processes for VPN connections of microprogrammed network interface devices supporting Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to access control deficiencies. Exploiting this vulnerability can...

Cisco Adaptive Security Appliance Software SSL/TLS DoS (cisco-sa-asaftd-sslvpndma-dos-HRrqB9Yx)

A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to inefficient direct memory acce...

The vulnerability in the secure loading mechanism of microprogramming software for Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) series of Cisco Secure Firewalls 3100 allows attackers to circumvent the secure loading mechanism.

The vulnerability of the secure loading mechanism for microprogramming firewalls from Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance, part of the Cisco Secure Firewall 3100 series, is related to the violation of trust boundaries. Exploiting this vulnerability allows attacker...

The vulnerability of the implementations of TLS and SSL protocols in the microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Firepower Threat Defense (FTD) from the ASA 5500-X Series, Firepower 4100 Series, and Firepower 9300 Series allows attackers to induce service interruptions.

The vulnerability of the implementations of TLS and SSL protocols in microprogrammable network interface devices from Cisco Adaptive Security Appliances ASA and Firepower Threat Defense FTD of the ASA 5500-X Series, Firepower 4100 Series, and Firepower 9300 Series is related to the copying of...

CVE-2022-20947

A vulnerability in dynamic access policies DAP functionality of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This...

CVE-2022-20928

A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to establish a connection as a different user. This vulnerability is due to...

CVE-2022-20927: Buffer Copy without Checking Size of Input

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper memory...

CVE-2022-20826: Trust Boundary Violation

A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance ASA Software or Cisco Firepower Threat Defense FTD Software could allow an unauthenticated attacker with physical access to the device to bypass the secure bo...