Cisco ASA Media Gateway Control Protocol DoS

The vulnerability of the Media Gateway Control Protocol implementation in microprogrammed network devices of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor...

Cisco Adaptive Security Appliance Web Interface Data Compromise

The vulnerability of the web interface of Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD lies in the lack of pathname checking for access-controlled directories. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...

Cisco Firepower Threat Defense GRE DoS

The vulnerability of the Generic Routing Encapsulation GRE protocol in Cisco Firepower Threat Defense FTD is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cisco Firepower Threat Defense Resource Consumption DoS

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco Firepower Threat Defense Software Information Disclosure Vulnerability (cisco-sa-ftd-infodis-kZxGtUJD)

An information disclosure vulnerability exists in Cisco Firepower Threat Defense due to insufficient application identification. An unauthenticated, remote attacker can exploit this, via specifically crafted traffic, to disclose potentially sensitive information. see the included Cisco BIDs and...

Cisco Firepower Threat Defense Denial of Service (DoS) (cisco-sa-fp2100-arp-dos-kLdCK8ks)

A denial of service vulnerability exists in the ARP packet processing component of Cisco Firepower Threat Defence FTD software due to insufficient validation of ARP data. An unauthenticated, adjacent attacker can exploit this to cause to cause the system to stop responding. Please see the include...

Cisco Firepower Management Center Open Redirect (cisco-sa-fmc-webredirect-TcFgd42y)

According to its self-reported version, Cisco Firepower Management Center is affected by a vulnerability in its web interface due to improper input validation of HTTP request parameters. An unauthenticated, remote attacker can exploit this, by intercepting and modifying an HTTP request from a use...

Cisco Firepower Management Center XSS (cisco-sa-fmcxss-UT3bMx9k)

According to its self-reported version, Cisco Firepower Management Center is affected by a cross-site scripting XSS vulnerability. The vulnerability exists in the web-based management interface of FMC software due to improper validation of user-supplied input before returning it to users. An...

Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability (cisco-sa-ssl-bypass-O5tGum2n)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a remote code execution vulnerability in Transport Layer Security. This is due to logic error withing SNORT handling. An unauthenticated, remote attacker can exploit this to bypass web traffic policies...

Cisco Firepower Threat Defense Software Signature Verification Bypass (cisco-sa-sigbypass-FcvPPCeP)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a signature verification bypass vulnerability due to improper verification of digital signatures for patch images. An authenticated, remote attacker can exploit this, by crafting an unsigned software...

Cisco Firepower Threat Defense Software Shell Access (cisco-sa-ftd-shell-9rhJF68K)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a shell access vulnerability in the support tunnel feature due to improper configuration of that feature. An authenticated, local attacker can exploit this, by enabling the support tunnel, setting a key...

Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability (cisco-sa-ftd-dos-2-sS2h7aWe)

According to its version and configuration, the Cisco Firepower Threat Defense FTD Software running on the remote device is affected by a denial of service DoS vulnerability in the generic routing encapsulation GRE tunnel decapsulation feature. The vulnerability is due to a memory handling error...

Cisco Firepower Threat Defense Software IKEv1 DoS (cisco-sa-asa-dos-BqYFRJt9)

A vulnerability exists in the Internet Key Exchange version 1 IKEv1 feature of Cisco Firepower Threat Defense FTD Software due to improper management of system memory. An unauthenticated, remote attacker can exploit this, by sending malicious IKEv1 traffic to an affected device, in order to cause...

Cisco Fixes High-Severity Flaws In Firepower Security Software, ASA

Cisco has stomped out 12 high-severity vulnerabilities across several network security products. The flaws can be exploited by unauthenticated remote attackers to launch an array of attacks – from denial of service DoS to sniffing out sensitive data. Specifically affected is Cisco’s Firepower...

Cisco Firepower Threat Defense Access Control Error Vulnerability (CNVD-2020-27773)

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from the U.S. company Cisco Cisco. An access control error vulnerability exists in Cisco FTD versions 6.3.0, 6.4.0, and 6.5.0, which arises from configuring different administrative...

Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2020-27105)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An input validation error vulnerability exists in Cisco Firepower Management Center. An attacker could exploit this vulnerability by sending a specially crafted HTTP request to an affected...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Denial of Service Vulnerability (CNVD-2020-31104)

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Firepower Threat Defense Access Control Error Vulnerability (CNVD-2020-27107)

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. An Access Control Error vulnerability exists in Cisco Firepower Threat Defense that stems from incorrect configuration. An attacker could exploit th...

Cisco Firepower Threat Defense Access Control Error Vulnerability (CNVD-2020-27106)

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. An access control error vulnerability exists in Cisco Firepower Threat Defense. An attacker could exploit the vulnerability by sending specially...

Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2020-27103)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An input validation error vulnerability exists in Cisco Firepower Management Center that stems from not properly validating HTTP request parameters. An attacker could exploit this...