CVE-2020-3564: Improper Access Control

A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacke...

Cisco Adaptive Security Appliance DOS (cisco-sa-20191002-asa-dos)

A denial of service vulnerability exists in the FTP inspection engine of Cisco Adaptive Security Appliance ASA software due to insufficient validation of FTP data. An unauthenticated, remote attacker can exploit this to cause to cause the system to stop responding. Please see the included Cisco...

CVE-2019-12673: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

CVE-2018-15390: Improper Locking

A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails to releas...