PT-2020-5097 · Cisco · Cisco Firepower Management Center +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the sftunnel functionality could allow an...

PT-2020-4471

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense FTD Software affected versions not specified Description A vulnerability in the ingress packet processing path could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition due to...

PT-2020-4722

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls affected versions not specified Description: A vulnerability in the TLS handl...

PT-2020-4465 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: A vulnerability in the Common Access Card CAC authentication feature could allow an unauthenticated, remote attacker to bypass authentication and acce...

CVE-2020-3436: Unrestricted Upload of File with Dangerous Type

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to upload arbitrary-sized files to specific folders on an affected device, which could lead to an unexpected devic...

PT-2020-5183 · Cisco · Cisco Data Center Network Manager +1

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager DCNM Software affected versions not specified Cisco Firepower Management Center FMC affected versions not specified Description: The issue is related to insufficient path restriction enforcement in a certain...

PT-2020-4467

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense FTD Software affected versions not specified Description The issue is related to a lack of sufficient memory management protections under heavy SNMP polling loads in the Simple Network Management Protocol SNMP...

PT-2020-4457

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense FTD Software affected versions not specified Description A vulnerability in the TCP Intercept functionality could allow an unauthenticated, remote attacker to bypass configured Access Control Policies and Service...

PT-2020-4470

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense FTD Software for Cisco Firepower 4110 appliances affected versions not specified Description The issue is related to incomplete input validation upon receiving ICMP packets, which could allow an unauthenticated,...

PT-2020-4456

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense FTD Software affected versions not specified Description A vulnerability in the ssl inspection component could allow an unauthenticated, remote attacker to crash Snort instances due to insufficient input...

PT-2020-4718

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web services interface of the affected softwar...

PT-2020-4701

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software versions prior to the fixed release Cisco Firepower Threat Defense FTD Software versions prior to the fixed release Description The issue is related to insufficient validation of URLs when portal...

CVE-2020-3352: Hidden Functionality

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to access hidden commands. The vulnerability is due to the presence of undocumented configuration commands. An attacker could exploit this vulnerability by performing specific...

PT-2020-5099 · Cisco · Cisco Firepower Management Center +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the sfmgr daemon could allow an authenticated, remote...

PT-2020-5098 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to improper handling of system resource values, which could allow an unauthenticated, remote attacker to cause a denial of servic...

PT-2020-4710 · Cisco +1 · Cisco Ftd +5

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD versions affected versions not specified Cisco SD-WAN versions affected versions not specified Cisco IOS XE versions affected versions not specified Cisco Meraki versions affected versions not specified...

PT-2020-4723 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Clientless SSL VPN WebVPN of Cisco Adaptive Securit...

CVE-2020-3562: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the SSL/TLS inspection of Cisco Firepower Threat Defense FTD Software for Cisco Firepower 2100 Series firewalls could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validatio...

PT-2020-4458 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the SSL/TLS session handler could allow an...

CVE-2020-3580: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...