CB TAU Threat Intelligence Notification: RobbinHood Ransomware Stops 181 Windows Services Before Encryption

According to source articles, RobbinHood ransomware has been discovered and it will stop 181 Windows services prior to the encryption taking place. It is thought that the ransomware might not be distributed through a typical spam campaign, but instead via other methods such as hacked remote deskt...

Cisco Firepower Threat Defense Software 6.x < 6.2.3.12 / 6.3.x < 6.3.0.3 Multiple Vulnerabilities

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by following vulnerabilities: - A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco Firepower Threat Defense FTD Software could allow an...

CVE-2019-1833

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol parser of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies. The vulnerability is due to improper parsing of specific attributes in a TLS...

CVE-2019-1832

A vulnerability in the detection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by...

Input validation

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol parser of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies. The vulnerability is due to improper parsing of specific attributes in a TLS...

CVE-2019-1833

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol parser of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies. The vulnerability is due to improper parsing of specific attributes in a TLS...

CVE-2019-1833 Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol parser of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies. The vulnerability is due to improper parsing of specific attributes in a TLS...

CVE-2019-1833 Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol parser of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies. The vulnerability is due to improper parsing of specific attributes in a TLS...

CVE-2019-1832 Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability

A vulnerability in the detection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by...

CVE-2019-1832 Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability

A vulnerability in the detection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by...

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software, related to resource management errors, allows attackers to trigger a service failure.

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by creating a persistent TCP traffic on ports 22 or 443...

Microsoft Windows Latest Servicing Stack Updates-Defense in Depth (KB4498947)

This host is missing an important security update according to Microsoft KB4498947. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

The vulnerability of the command-line interface of Cisco Firepower Threat Defense microprogramming systems allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the command-line interface of Cisco Firepower Threat Defense software exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

Microsoft Windows Latest Servicing Stack Updates-Defense in Depth (KB4500640)

This host is missing an important security update according to Microsoft KB4500640. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Microsoft Windows Latest Servicing Stack Updates-Defense in Depth (KB4499728)

This host is missing an important security update according to Microsoft KB4499728. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Windows Latest Servicing Stack Updates-Defense in Depth (KB4497398)

This host is missing an important security update according to Microsoft KB4497398. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

The vulnerability of the TCP protocol implementation of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense micro-programming devices allows attackers to induce service failures.

The vulnerability of the TCP protocol implementation of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending high-speed packet...

The vulnerability of the WebVPN component of the microprogramming software for Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows a attacker to induce a service failure.

The vulnerability of the WebVPN component of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software relates to improper management of authenticated sessions. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the MOBIKE microprogramming-based key exchange service provided by Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense allows a attacker to trigger a memory leak or restart of the vulnerable device.

The vulnerability of the MOBIKE microprogramming-based key exchange service of Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to trigger memory leaks or restart the vulnerable...