The vulnerability of the web interface of Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the web interface of Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD lies in the lack of pathname checking for access-controlled directories. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...

Cisco Firepower Threat Defense Software Shell Access (cisco-sa-ftd-shell-9rhJF68K)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a shell access vulnerability in the support tunnel feature due to improper configuration of that feature. An authenticated, local attacker can exploit this, by enabling the support tunnel, setting a key...

Cisco Firepower Management Center XSS (cisco-sa-fmcxss-UT3bMx9k)

According to its self-reported version, Cisco Firepower Management Center is affected by a cross-site scripting XSS vulnerability. The vulnerability exists in the web-based management interface of FMC software due to improper validation of user-supplied input before returning it to users. An...

The vulnerability of the Media Gateway Control Protocol implementation in microprogrammable network devices from Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service interruptions.

The vulnerability of the Media Gateway Control Protocol implementation in microprogrammed network devices of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor...

Cisco Firepower Threat Defense Denial of Service (DoS) (cisco-sa-fp2100-arp-dos-kLdCK8ks)

A denial of service vulnerability exists in the ARP packet processing component of Cisco Firepower Threat Defence FTD software due to insufficient validation of ARP data. An unauthenticated, adjacent attacker can exploit this to cause to cause the system to stop responding. Please see the include...

Cisco Firepower Threat Defense Software Information Disclosure Vulnerability (cisco-sa-ftd-infodis-kZxGtUJD)

An information disclosure vulnerability exists in Cisco Firepower Threat Defense due to insufficient application identification. An unauthenticated, remote attacker can exploit this, via specifically crafted traffic, to disclose potentially sensitive information. see the included Cisco BIDs and...

The vulnerability of the Generic Routing Encapsulation (GRE) protocol in Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.

The vulnerability of the Generic Routing Encapsulation GRE protocol in Cisco Firepower Threat Defense FTD is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cisco Firepower Threat Defense Software IKEv1 DoS (cisco-sa-asa-dos-BqYFRJt9)

A vulnerability exists in the Internet Key Exchange version 1 IKEv1 feature of Cisco Firepower Threat Defense FTD Software due to improper management of system memory. An unauthenticated, remote attacker can exploit this, by sending malicious IKEv1 traffic to an affected device, in order to cause...

Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability (cisco-sa-ftd-dos-2-sS2h7aWe)

According to its version and configuration, the Cisco Firepower Threat Defense FTD Software running on the remote device is affected by a denial of service DoS vulnerability in the generic routing encapsulation GRE tunnel decapsulation feature. The vulnerability is due to a memory handling error...

Cisco Fixes High-Severity Flaws In Firepower Security Software, ASA

Cisco has stomped out 12 high-severity vulnerabilities across several network security products. The flaws can be exploited by unauthenticated remote attackers to launch an array of attacks – from denial of service DoS to sniffing out sensitive data. Specifically affected is Cisco’s Firepower...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Denial of Service Vulnerability (CNVD-2020-31104)

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Firepower Threat Defense Resource Management Error Vulnerability (CNVD-2020-27774)

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from the U.S. company Cisco Cisco. A resource management error vulnerability exists in the handling of session timeouts used for management connections in Cisco FTD versions prior to...

Cisco Firepower Management Center File Overwrite Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A file overwrite vulnerability exists in the Web UI in versions prior to Cisco FMC Software Release 6.2.2.2, which can be exploited by a remote attacker to overwrite files on the file syst...

Cisco Firepower Threat Defense Denial of Service Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. A denial of service vulnerability exists in the Secure Sockets Layer SSL/Transport Layer Security TLS processor of the FTD Software in the Cisco...

Cisco Firepower Threat Defense Resource Management Error Vulnerability (CNVD-2020-27776)

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from the U.S. company Cisco Cisco. A resource management error vulnerability exists in the packet processing function in Cisco FTD Software, which stems from inefficient memory...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Denial of Service Vulnerability (CNVD-2020-31111)

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2020-27108)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center suffers from a cross-site scripting vulnerability that originates from the user interface not adequately validating user-submitted input. An attacker coul...

Cisco Firepower Management Center Trust Management Issues Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center is vulnerable to a trust management issue that arises from a system account that uses a default static password that cannot be changed by the system...

Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2020-27105)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An input validation error vulnerability exists in Cisco Firepower Management Center. An attacker could exploit this vulnerability by sending a specially crafted HTTP request to an affected...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Information Disclosure Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...