PT-2020-2518 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is due to insufficient input validation in the web UI of the software, allowing a remote attacker to send a crafted HTTP request to an...

CVE-2020-3307: Improper Input Validation

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...

CVE-2020-3186: Improper Access Control

A vulnerability in the management access list configuration of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an affected system. The vulnerability is due to the configuration of different...

CVE-2020-3318: Use of Hard-coded Credentials

Multiple vulnerabilities in Cisco Firepower Management Center FMC Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of...

PT-2020-2510 · Cisco · Cisco Firepower Management Center +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower User Agent Software affected versions not specified Description: The issue concerns multiple vulnerabilities in Cisco Firepower Management Center F...

PT-2020-2511 · Cisco · Cisco Firepower User Agent +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower User Agent Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software that could allow ...

CVE-2020-3301: Use of Hard-coded Credentials

Multiple vulnerabilities in Cisco Firepower Management Center FMC Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of...

PT-2020-2229 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security T...

PT-2020-2232

Name of the Vulnerable Software and Affected Versions Cisco Firepower Device Manager On-Box software affected versions not specified Description The issue is related to insufficient hardening of the XML parser configuration, which could allow an authenticated, remote attacker to cause the system ...

PT-2020-2228 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Open Shortest Path First OSPF implementation could...

PT-2020-2235

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense FTD Software affected versions not specified Description A logic error in the handling of the Transport Layer Security version 1.3 TLS 1.3 policy with URL category functionality could allow an unauthenticated,...

PT-2020-2230 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Open Shortest Path First OSPF implementation could...

PT-2020-2236 · Cisco · Snort +3

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions prior to the fixed version Cisco Firepower Threat Defense versions prior to the fixed version Cisco Firepower Management Center versions prior to the fixed version Description: The issue is related to errors in how the Snor...

Cisco Firepower Threat Defense Software Command Injection Vulnerability (cisco-sa-20191002-ftd-cmdinj)

A command injection vulnerability exists in Cisco Firepower Threat Defense due to insufficient input validation. An authenticated, local attacker can exploit this, via executing a specific CLI command that includes crafted arguments, to execute arbitrary commands. TRUSTED...

The vulnerability of the Cisco Discovery protocol allows attackers to trigger a maintenance failure in operating systems such as Cisco NX-OS and Cisco FXOS.

The vulnerability of the Cisco Discovery protocol’s implementation in Cisco NX-OSS and Cisco FXOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco FTD Software Pluggable Authentication Module DoS (cisco-sa-20191002-ftd-fpmc-dos)

According to its self-reported version, Cisco Firepower Threat Defense FTD Software is affected by a vulnerability in the configuration of the Pluggable Authentication Module PAM due to improper resource management in the context of user session management. An authenticated, remote attacker can...

Cisco Firepower Threat Defense (FTD) Software Command Injection Vulnerability (cisco-sa-20200226-fxos-ucs-cli-cmdinj)

According to its self-reported version, Cisco FTD Software is affected by a command injection vulnerability within the local management local-mgmt CLI of Cisco FTD Software due to insufficient input validation. An authenticated, local attacker can exploit this to execute arbitrary commands on the...

Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities (cisco-sa-20191002-firepwr-bypass)

According to its self-reported version, Cisco Firepower System Software is affected by two vulnerabilities in the detection engine, as follows: - A vulnerability due to incorrect detection of the RTF file syntax. An unauthenticated, remote attacker can exploit this, by sending a malicious RTF fil...

The vulnerability in the implementation of the Cisco Discovery protocol in Cisco NX-OS, Cisco FXOS, and Cisco IOS XR operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Discovery protocol in operating systems such as Cisco NX-OS, Cisco FXOS, and Cisco IOS XR is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Cisco Firepower Threat Defense (FTD) Software CLI Arbitrary File Read and Write Vulnerability (cisco-sa-20200226-fxos-cli-file)

According to its self-reported version, Cisco Firepower Threat Defense FTD is affected by an arbitrary file read and write vulnerability in the CLI due to insufficient input validation. An authenticated, local attacker can exploit this, via crafted arguments on a specific CLI command, to read and...