3807 matches found
Cisco Firepower Threat Defense Software Layer 2 Filtering Bypass (cisco-sa-20190501-asa-ftd-bypass)
According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the detection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to send data...
Cisco Firepower Management Center Arbitrary Log File Write Vulnerability (cisco-sa-alfo-tHwFDmTE)
According to its self-reported version, Cisco Firepower Management Center is affected by an arbitrary file write vulnerability due to insufficient user input validation. An unauthenticated, remote attacker can exploit this to write arbitrary entries in the application's log file on the remote hos...
Cisco Firepower Threat Defense (FTD) DoS (cisco-sa-asaftd-mgcp-SUqB8VKH)
A denial of service DoS vulnerability exists in Cisco Firepower Threat Defense FTD due to inefficient memory management in its Media Gateway Control Protocol MGCP inspection component. An unauthenticated, remote attacker can exploit this issue, by sending specially crafted packets to an affected...
The vulnerabilities of Cisco Firepower Management Center’s network management software, related to the rigid encoding of registration data, allow attackers to gain full access to the system.
The vulnerability of Cisco Firepower Management Center’s network management software is related to the rigid coding of registration data. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to gain full access to the system using a high-privilege account...
The vulnerability of the Cisco Firepower Management Center’s software management web interface allows a perpetrator to rerecord files in the file system of the vulnerable device.
The vulnerability of the Cisco Firepower Management Center software’s web interface exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to re-write files in the file system of the vulnerable device using a specially created file...
The vulnerability of the DHCP module of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software allows a attacker to induce a service failure.
The vulnerability of the DHCP module of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software-related microprogramming systems is related to errors in processing certain DHCP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the Cisco Firepower Management Center software’s web interface allows a perpetrator to redirect users to malicious web pages.
The vulnerability of the Cisco Firepower Management Center software’s web interface is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to redirect users to malicious web pages by intercepting and modifying user HTTP reques...
The vulnerabilities of Cisco Firepower Management Center’s network management software, related to the rigid encoding of registration data, allow attackers to gain full access to the system.
The vulnerability of Cisco Firepower Management Center’s network management software is related to the rigid coding of registration data. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to gain full access to the system using a high-privilege account...
The vulnerability of the Cisco Firepower Management Center software’s web interface allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the Cisco Firepower Management Center software’s web interface is related to insufficient verification of the data entered by users. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack using a specially created link...
The vulnerability of Microprogrammed Network Interface Systems in Cisco Firepower Threat Defense, related to access control deficiencies, allows attackers to execute arbitrary code with root privileges.
The vulnerability of Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to lack of access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...
The software for managing Cisco Firepower Device Manager On-Box devices is vulnerable due to insufficient validation of input data. This vulnerability allows a perpetrator to rewrite any files in the basic operating system of the vulnerable device.
The software vulnerability of Cisco Firepower Device Manager On-Box exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to rewrite any files in the basic operating system of the vulnerable device by loading a malicious file...
The vulnerability of the web interface of Cisco Firepower Management Center’s network management software allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the Cisco Firepower Management Center software’s web interface exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by sending a specially crafted HTTP request to the...
The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software, related to uncontrolled resource consumption, allows attackers to cause service interruptions.
The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures due to incorrect processing of ARP packets...
The vulnerability of Microprogrammed Network Interface Systems in Cisco Firepower Threat Defense, related to access control deficiencies, allows attackers to compromise the integrity of protected information.
The vulnerability of Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to lack of access control. Exploiting this vulnerability allows a malicious actor to influence the integrity of protected information by using a specially created remote management traff...
The vulnerability of the application policy configuration of Cisco Firepower Threat Defense allows a attacker to gain read access to data.
The vulnerability of Cisco Firepower Threat Defense’s application policy configuration is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read-only access to data by creating traffic on the vulnerable device...
The vulnerability of Microprogrammed Network Interface Cards from Cisco Firepower Threat Defense, related to resource management errors, allows attackers to trigger a service failure.
The vulnerability of Cisco Firepower Threat Defense’s microprogrammed network interface controllers is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures by creating a large number of remote management connections on the...
Cisco Firepower Threat Defense WebVPN DoS (cisco-sa-20190501-sd-cpu-dos)
According to its self-reported version, the Cisco Firepower Threat Defense FTD software installed on the remote host is affected by a vulnerability in the WebVPN login process that allows an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerabili...
Cisco Adaptive Security Appliance Software Lightweight Directory Access Protocol Denial of Service Vulnerability (cisco-sa-20190501-asa-ftds-ldapdos)
According to its self-reported version, the Cisco ASA device is affected by a vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated,...
Cisco Firepower Threat Defense Software Web Services Path Traversal (cisco-sa-asaftd-path-JE3azWw43)
A vulnerability exists in the web services interface of Cisco Firepower Threat Defense FTD Software due to a lack of proper input validation of the HTTP URL. An unauthenticated, remote attacker can exploit this, by sending a crafted HTTP request containing directory traversal character sequences,...
Cisco Firepower Threat Defense Software Management Interface DoS (cisco-sa-ftd-mgmt-interface-dos-FkG4MuTU)
According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a denial of service DoS vulnerability in the management interface due to how FTD handles session timeouts for management connections. An unauthenticated, remote attacker can exploit this issue, by sendi...