Cisco Firepower Management Center XSS

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Cisco Firepower Management Center Phishing

The vulnerability of the web interface of the Cisco Firepower Management Center FMC software management system is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to perform phishing attacks using specially created URIs...

Cisco Firepower Threat Defense XSS

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA software lies in the insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to execute a cross-site attac...

Cisco Firepower Threat Defense XSS

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA software lies in insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to execute a cross-site scripting...

Snort intrusion detection system Security Bypass

The vulnerability of the Snort intrusion detection system, the microprogramming software for Cisco Firepower Threat Defense FTD, the program-defined network Cisco SD-WAN, the Cisco IOS XE network operating system, and the microprogramming software for Cisco Meraki devices is related to a flaw in...

Cisco Firepower Threat Defense Command-Line Interface Access

The vulnerability of the command-line interface of Cisco Firepower Threat Defense software-related microprogramming systems is related to the presence of undocumented configuration commands. Exploiting this vulnerability can allow attackers to gain access to hidden commands...

Cisco Adaptive Security Appliances SSL VPN Micro-programming DoS

The vulnerability of the SSL VPN microprogramming software for Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco Firepower Threat Defense Container Command Execution Root Privilege

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software is related to errors during the operation of containers. Exploiting this vulnerability allows an attacker to execute commands with root privileges by modifying a specific configuration file within the container’s basi...

Cisco Adaptive Security Appliance DoS

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s SSL/TLS session processors involves uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by initiating multiple SSL/TLS sessions and...

Cisco Firepower Threat Defense ssl_inspection DoS

The vulnerability of the sslinspection component of Cisco Firepower Threat Defense’s microprogramming network interface layer exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending corrupted TLS...

Cisco Firepower Threat Defense TCP Intercept

The vulnerability of the TCP Intercept function in Cisco Firepower Threat Defense microprogramming systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

Cisco OSPFv2 DoS

The vulnerability of the OSPFv2 protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense software involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco Firepower Threat Defense Buffer Overflow DoS

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software exists due to insufficient checks during the processing of Ethernet frames. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending malicious Ethernet frames through the...

Cisco Adaptive Security Appliance System Reboot

The vulnerability of the web-based interfaces of Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense lies in the absence of restrictions on file downloads. Exploiting this vulnerability could allow a malicious actor to trigger a system reboot by downloading files into specific...

Cisco Firepower Threat Defense SNMP DoS

The vulnerability of the SNMP protocol implementation in Cisco Firepower Threat Defense microprogramming devices is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending a large number of...

Cisco Firepower Management Center Authentication Bypass

The vulnerability of the Common Access Card authentication function in Cisco Firepower Management Center FMC software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to the FMC...

Cisco Adaptive Security Appliance Resource Consumption DoS

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted fragmented IP...

Cisco Firepower Threat Defense DoS

The vulnerability of Cisco Firepower Threat Defense’s SSL/TLS microprogramming system check mechanisms arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted and corrupted...

Cisco Firepower Threat Defense Software Stream Reassembly Bypass (cisco-sa-20190816-ftd-srb)

A stream reassembly bypass vulnerability exists in Cisco Firepower Threat Defense FTD due to improper reassembly of traffic streams. An unauthenticated, remote attacker can exploit this, by sending specially crafted streams through an affected device to bypass filtering and deliver malicious...

Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Denial of Service Vulnerability (CNVD-2021-44682)

Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance are both products of Cisco, Inc. Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services.Cisco Adaptive Security Appliance is a firewall and network security platform. Cisco...