3806 matches found
CISCO-CVE-2020-3452-Scanner-Exploiter
CISCO CVE-2020-3452 扫描器与利用工具 它将从Shodan扫描目标服务器，然后找出存在CVE-2020-3452漏洞的服务器（Cisco自适应安全设备和FTD未授权远程文件读取）。 关于 Cisco自适应安全设备（ASA）软件和Cisco Firepower威胁防御（FTD）软件的Web服务接口存在一个漏洞，可能允许未经身份验证的远程攻击者进行目录遍历攻击并读取目标系统上的敏感文件。...
cisco_asa_research
Cisco ASA 研究 本仓库包含在 Black Hat USA 2022 和 DEF CON 30 上展示的幻灯片和代码。包含以下内容： 幻灯片 DEF CON 30 和 Black Hat 的幻灯片合集。由于 DEF CON 的时间段更长，其幻灯片合集略长一些。 theway - 一个用于为 Cisco ASA 创建恶意/可分发 ASDM 包的工具 CVE-2022-20829。 whatsup - 一个用于创建恶意/可分发的 Cisco FirePOWER 模块安装包的工具（无 CVE）。 pinchme - 一个用于创建恶意/可分发的 Cisco FirePOWER...
cve-2020-3452
cve-2020-3452 Cisco ASA & Firepower における未認証ファイル読み取り インストール git clone https://github.com/Loneyers/cve-2020-3452 && cd cve-2020-3452 && go build 使い方 ./cve-2020-3452 url.txt 40...
CVE-2020-3452
CVE-2020-3452 Cisco ASA および Cisco Firepower における認証なしファイル読み取り Saikat Karmakar | 2021年11月 このスクリプトは、対象ホストがCVE-2020-3452に対して脆弱かどうかをテストします。 必要条件: root@kitploit: requests termcolor 使用法: root@kitploit: darklord@kali: python3 cve-2020-3452.py -h usage: cve-2020-3452.py -h -u U -f F CVE-2020-3452...
Cisco Firepower Threat Defense (FTD) Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)
According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated,...
Cisco ASA/FTD Persistent Local Code Execution (CVE-2024-20359)
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plugins and that has been available in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code wi...
Cisco ASA/FTD WebVPN Double Free (CVE-2018-0101)
A vulnerability in the Secure Sockets Layer SSL VPN functionality of the Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a...
Cisco ASA/FTD Web Services Infinite Loop (CVE-2024-20353)
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...
Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)
According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol processing of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and...
Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)
According to its self-reported version, Cisco IOS Software is affected by a vulnerability. - A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol processing of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and Cis...
Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion
Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processe...
Cisco Firepower Threat Defense (FTD) Software IKEv2 DoS Vulnerabilities (cisco-sa-asaftd-ikev2-dos-eBueGdEG)
According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a...
Cisco Firepower Threat Defense (FTD) Software OSPF DoS Vulnerabilities (cisco-sa-asaftd-ospf-ZH8PhbSW)
According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...
New Linux FIRESTARTER Backdoor Targets Cisco Firepower Devices
CISA and NCSC warn that FIRESTARTER, a Linux-based backdoor, targets Cisco Firepower devices, evades patches, and enables persistent access even after firmware updates...
FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches
The U.S. Cybersecurity and Infrastructure Security Agency CISA has revealed that an unnamed federal civilian agency's Cisco Firepower device running Adaptive Security Appliance ASA software was compromised in September 2025 with a new malware called FIRESTARTER. FIRESTARTER, per CISA and the U.K....
UAT-4356's Targeting of Cisco Firepower Devices
Cisco Talos is aware of UAT-4356's continued active targeting of Cisco Firepower devices' Firepower eXtensible Operating System FXOS. UAT-4356 exploited n-day vulnerabilities CVE-2025-20333 and CVE-2025-20362 to gain unauthorized access to vulnerable devices, where the threat actor deployed their...
Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency CISA issued an update to V1: Emergency Directive ED 25-03: Identify and Mitigate Potential Compromise of Cisco Devices...
CVE-2026-20112
creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:10+00:00| seen|...
CVE-2026-20104
creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities20260326 2026-03-26 03:00:10+00:00| seen|...
