Cisco Firepower Threat Defense (FTD) Software IKEv1 DoS (cisco-sa-20191002-asa-ftd-ikev1-dos)

According to its self-reported version the Cisco Firepower Threat Defense FTD Software running on the remote device is affected by a denial of service DoS vulnerability in the Internet Key Exchange version 1 IKEv1 feature of Cisco Firepower Threat Defense FTD Software. The vulnerability is due to...

Cisco Firepower Management Center Authorization Issues Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An authorization issue vulnerability exists in Cisco Firepower Management Center. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in...

The vulnerability of the web interface of Cisco Firepower Management Center software allows a perpetrator to perform arbitrary actions on the vulnerable device.

The vulnerability of the Cisco Firepower Management Center’s software network management interface is related to authentication deficiencies. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device by sending specially crafted HTTP requests...

Cisco Firepower Management Center Lightweight Directory Access Protocol Authentication Bypass (cisco-sa-20200122-fmc-auth)

According to its self-reported version, Cisco Firepower Management Center is affected by an authentication bypass vulnerability in the web-based management interface. This is due to improper handling of Lightweight Directory Access Protocol LDAP authentication responses from an external...

Cisco Firepower Management Center Lightweight Directory Access Protocol Authentication Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper handling...

PT-2020-1393 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to bypass...

Cisco Firepower Threat Defense Software DoS (cisco-sa-20181003-asa-syslog-dos)

According to its self-reported version, the TCP syslog module of Cisco Firepower Threat Defense FTD Software allows an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to a missing...

Cisco Firepower Threat Defense Software WebVPN XSS (cisco-sa-20191002-asa-xss)

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Firepower Threat Defense Software FTD allows an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

New Snort rules protect against recently discovered Citrix vulnerability

By Edmund Brumaghin, with contributions from Dalton Schaadt. Executive Summary Recently, the details of a critical vulnerability affecting Citrix Application Delivery Controller and Citrix Gateway servers were publicly disclosed. This vulnerability is currently being tracked using CVE-2019-19781....

2019: The year in malware

By Jon Munshaw. From ransomware attacks to DNS deception, attackers were just as active as ever in 2019. This year saw a number of big-name malware families come onto the scene, including Sea Turtle, one of the most high-profile DNS hijacking attempts in recent memory. BlueKeep also stirred up...

The vulnerability of the reassembly function for SSL package modules in Cisco Firepower System Software allows a intruder to trigger a service failure.

The vulnerability of the package rebuilding function of the Secure Sockets Layer SSL module in Cisco Firepower System Software allows for uncontrolled resource consumption. Exploiting this vulnerability can enable a malicious actor to cause service interruptions remotely...

Cisco ASA Firepower Version

The remote host is running the Cisco Adaptive Security Appliance ASA operating system with the Firepower eXtensible Operating System FXOS or Firepower Threat Defense FTD. It is possible to read the ASA FXOS or FTD version number by connecting to the device via SSH. C Tenable Network Security, Inc...

The vulnerability of the Lua interpreter implemented in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) hardware network devices allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Lua interpreter implemented in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD hardware-based network devices relates to the execution of operations beyond the buffer memory boundaries. Exploiting this vulnerability allows a malicious acto...

Vulnerabilities in the web interface of Cisco Firepower Management Center (FMC) software allow a perpetrator to carry out cross-site scripting attacks or gain unauthorized access to protected information.

Multiple vulnerabilities in the web interface of Cisco Firepower Management Center FMC software-related systems are associated with the lack of measures taken to protect the website structure. Exploitation of these vulnerabilities could allow a malicious actor to perform cross-site scripting...

Vulnerabilities in the web interface of Cisco Firepower Management Center (FMC) software allow a perpetrator to carry out cross-site scripting attacks or gain unauthorized access to protected information.

Multiple vulnerabilities in the web interface of Cisco Firepower Management Center FMC software-related systems are associated with the lack of measures taken to protect the website structure. Exploitation of these vulnerabilities could allow a malicious actor to perform cross-site scripting...

Cisco Firepower Threat Defense RCE (cisco-sa-20191112-asa-ftd-lua-rce)

A remote code execution vulnerability exists in the Lua interpreter of Cisco Firepower Threat Defense FTD software due to insufficient restrictions on the allowed Lua function calls within the context of user-supplied Lua scripts. An authenticated, remote attacker can exploit this to bypass...

Cisco Firepower Threat Defense Software SIP Inspection DoS (cisco-sa-20191002-asa-ftd-sip-dos)

A denial of service DoS vulnerability exists in the Session Initiation Protocol SIP inspection module of Cisco Firepower Threat Defense FTD due to improper parsing of SIP messages. An unauthenticated, remote attacker can exploit this issue by sending a malicious SIP packet to an affected device...

Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software Cross-Site Scripting Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

The vulnerability of Cisco Firepower Management Center (FMC) software lies in its susceptibility to attacks due to insufficient checks on incoming traffic. This allows attackers to bypass virus checklists and malware policies, and send malicious traffic through the vulnerable device.

The vulnerability of Cisco Firepower Management Center FMC software exists due to insufficient checks on incoming traffic. Exploiting this vulnerability allows a malicious actor to bypass policies that require checking files and malware programs, and send malicious traffic through the vulnerable...

The vulnerability of the software detection mechanism in Cisco Firepower System Software allows attackers to circumvent the configured security policies for detecting malicious programs and files with extensions .RTF and .RAR.

The vulnerability of the Cisco Firepower System Software’s malware detection mechanism exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass established security policies without being detected as carrying malware. The detected files...