PT-2020-2165 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the web services interface could allow an unauthenticated, remote attacker to condu...

PT-2020-2506 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the application policy configuration of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to...

PT-2020-2513 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to improper input validation of HTTP request parameters in the web interface, allowing an unauthenticated, remote attacker to...

PT-2020-2515 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the DHCP module could allow an unauthenticated, remote...

PT-2020-2510 · Cisco · Cisco Firepower Management Center +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower User Agent Software affected versions not specified Description: The issue concerns multiple vulnerabilities in Cisco Firepower Management Center F...

PT-2020-2163 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to improper length validation of a field in an IPv6 D...

PT-2020-2228 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Open Shortest Path First OSPF implementation could...

PT-2020-2229 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security T...

PT-2020-2230 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Open Shortest Path First OSPF implementation could...

PT-2020-2236 · Cisco · Snort +3

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions prior to the fixed version Cisco Firepower Threat Defense versions prior to the fixed version Cisco Firepower Management Center versions prior to the fixed version Description: The issue is related to errors in how the Snor...

Cisco Firepower Threat Defense Software Command Injection Vulnerability (cisco-sa-20191002-ftd-cmdinj)

A command injection vulnerability exists in Cisco Firepower Threat Defense due to insufficient input validation. An authenticated, local attacker can exploit this, via executing a specific CLI command that includes crafted arguments, to execute arbitrary commands. TRUSTED...

The vulnerability of the Cisco Discovery protocol allows attackers to trigger a maintenance failure in operating systems such as Cisco NX-OS and Cisco FXOS.

The vulnerability of the Cisco Discovery protocol’s implementation in Cisco NX-OSS and Cisco FXOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco FTD Software Pluggable Authentication Module DoS (cisco-sa-20191002-ftd-fpmc-dos)

According to its self-reported version, Cisco Firepower Threat Defense FTD Software is affected by a vulnerability in the configuration of the Pluggable Authentication Module PAM due to improper resource management in the context of user session management. An authenticated, remote attacker can...

Cisco Firepower Threat Defense (FTD) Software Command Injection Vulnerability (cisco-sa-20200226-fxos-ucs-cli-cmdinj)

According to its self-reported version, Cisco FTD Software is affected by a command injection vulnerability within the local management local-mgmt CLI of Cisco FTD Software due to insufficient input validation. An authenticated, local attacker can exploit this to execute arbitrary commands on the...

Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities (cisco-sa-20191002-firepwr-bypass)

According to its self-reported version, Cisco Firepower System Software is affected by two vulnerabilities in the detection engine, as follows: - A vulnerability due to incorrect detection of the RTF file syntax. An unauthenticated, remote attacker can exploit this, by sending a malicious RTF fil...

The vulnerability in the implementation of the Cisco Discovery protocol in Cisco NX-OS, Cisco FXOS, and Cisco IOS XR operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Discovery protocol in operating systems such as Cisco NX-OS, Cisco FXOS, and Cisco IOS XR is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Cisco FXOS Software CLI Command Injection Vulnerability (cisco-sa-20200226-fpwr-cmdinj)

According to its self-reported version, Cisco Firepower Extensible Operating System FXOS is affected by a command injection vulnerability in its command line interface component due to insufficient validation of arguments passed to a specific command. An authenticated, local attacker can exploit...

Cisco Firepower Threat Defense (FTD) Software CLI Arbitrary File Read and Write Vulnerability (cisco-sa-20200226-fxos-cli-file)

According to its self-reported version, Cisco Firepower Threat Defense FTD is affected by an arbitrary file read and write vulnerability in the CLI due to insufficient input validation. An authenticated, local attacker can exploit this, via crafted arguments on a specific CLI command, to read and...

Cisco Firepower 4100 Series and Firepower 9300 Security Appliances FXOS Software Operating System Command Injection Vulnerability (CNVD-2020-14817)

The Cisco Firepower 4100 Series and the Cisco Firepower 9300 Security Appliance are both products of Cisco Corporation.The Cisco Firepower 9300 Security Appliance is a 9300 Series security appliance.The Cisco FXOS Software is a set of firewall software that runs in the Cisco Security Appliance.Th...

Cisco Firepower Threat Defense DOS (cisco-sa-20191002-asa-dos)

A denial of service vulnerability exists in the FTP inspection engine of Firepower Threat Defense FTD software due to insufficient validation of FTP data. An unauthenticated, remote attacker can exploit this to cause to cause the system to stop responding. Please see the included Cisco BIDs and...