Input validation

A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input...

CVE-2023-20015 Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability

A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input...

CVE-2023-20015

CVE-2023-20015 affects Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and Cisco UCS 6200–6500 Fabric Interconnects. The root cause is insufficient input validation of user-supplied commands in the CLI, enabling an authenticated, local attacker to inject unauthorized commands. An...

CVE-2023-20015 Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability

A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input...

Cisco Firepower 4100 Series和Cisco Firepower 9300 Security Appliance 操作系统命令注入漏洞

Cisco Firepower 4100 Series and Cisco Firepower 9300 Security Appliance are both products of Cisco Corporation.Cisco Firepower 4100 Series is a 4100 series firewall appliance.Cisco Firepower 9300 Security Appliance is a 9300 series security appliance. Cisco Firepower 4100 Series is a 4100 series...

Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability

A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input...

Threat Round up for February 10 to February 17

Today, Talos is publishing a glimpse into the most prevalent threats weve observed between Feb. 10 and Feb. 17. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...

The vulnerability of the authentication and authorization processes for VPN connections of microprogramming network interfaces of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) is related to access control deficiencies, allowing attackers to gain access to the system under another user’s name.

The vulnerability of the authentication and authorization processes for VPN connections of microprogrammed network interface devices supporting Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to access control deficiencies. Exploiting this vulnerability can...

The vulnerability of the software implementation of the SNMP protocol for the Cisco Firepower Management Center (FMC) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SNMP protocol-based software for managing Cisco Firepower Management Centers involves deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information by sending GET requests...

The vulnerability of the import function of the administrative interface module of Cisco Firepower Management Center software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the import function of the administrative interface module of Cisco Firepower Management Center FMC is related to insufficient validation of XML files’ syntax. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information through ...

Cisco Firepower Threat Defense Software Privilege Escalation (cisco-sa-ftd-mgmt-privesc-7GqR2th)

A vulnerability in the management web server of Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This vulnerability exists because access to HTTPS endpoints is not properly...

The vulnerability of the SIP protocol implementation in the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD) allows a perpetrator to trigger a service failure.

The vulnerability of the SIP protocol implementation in the Snort intrusion detection system of Cisco Firepower Threat Defense FTD is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to remotely cause service interruptions by sending traff...

The vulnerability of the GRE protocol implementation in Cisco Firepower Threat Defense’s microprogramming-based network interface controllers allows a attacker to induce a service failure.

The vulnerability of the GRE protocol implementation in Cisco Firepower Threat Defense’s microprogramming-based network interface controllers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause...

Cisco Firepower Threat Defense Software SSH DoS (cisco-sa-fmc-dos-OwEunWJN)

The version of Cisco Firepower Threat Defense installed on the remote host is affected by a vulnerability in the processing of SSH connections of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

Cisco Firepower Management Center Software SSH DoS (cisco-sa-fmc-dos-OwEunWJN)

The version of Cisco Firepower Threat Defense installed on the remote host is affected by a vulnerability in the processing of SSH connections of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affecte...

Cisco Firepower Threat Defense Software Command Injection (cisco-sa-ftd-fxos-cmd-inj-Q9bLNsrK)

A vulnerability in the CLI of Cisco FTD Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is due to insufficient input validation of...

The vulnerability of the Server Message Block Version 2 (SMB2) protocol implementation in the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD), the Cisco Meraki MX network device management software, the Cisco Cyber Vision industrial network security control solution, and the Cisco Umbrella cloud security service allows a perpetrator to bypass security restrictions and cause service interruptions.

The vulnerability of the Server Message Block Version 2 SMB2 implementation in the Snort intrusion detection system of the Cisco Firepower Threat Defense FTD microprogramming network interface devices, the Cisco Meraki MX network devices, the Cisco Cyber Vision industrial network security control...

The vulnerability of the command-line interface (CLI) of Cisco Firepower Threat Defense (FTD) microprogramming system and Cisco FXOS operating systems on Cisco Firepower 4100 and Firepower 9300 devices allows attackers to execute arbitrary commands.

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense microprogramming systems and Cisco FXOS operating systems in Cisco Firepower 4100 and Firepower 9300 devices is related to insufficient checking of command arguments. Exploiting this vulnerability allows an...

The vulnerability in the web interface for managing microprogramming software on Cisco Firepower Threat Defense (FTD) allows a perpetrator to enhance their privileges.

The vulnerability of the web-based interface for managing Microprogramming Software on Cisco Firepower Threat Defense FTD is related to resource management errors during the identification of endpoints. Exploiting this vulnerability allows a malicious actor to enhance their privileges by sending...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...