PT-2019-2369 · Cisco · Cisco Nx-Os +2

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software and Cisco NX-OS Software affected versions not specified Description: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on...

Cisco Firepower Threat Defense Policy Bypass Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. A policy bypass vulnerability exists in Cisco Firepower Threat Defense that stems from a failure to properly validate ICMP packets and can be...

Cisco Firepower Threat Defense Software Security Bypass Vulnerability

Cisco Firepower Threat Defense is a suite of software from the American company Cisco Cisco that runs in firewalls. A security bypass vulnerability exists in Cisco Firepower Threat Defense Software, which can be exploited by an attacker to set system policies...

Cisco Firepower Management Center XSS Vulnerability

According to its self-reported version, the Cisco Firepower Management Center is by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

Cisco Firepower Threat Defense Security Bypass Vulnerability

According to its self-reported version, the Cisco Firepower Threat Defense Software is affected by a security bypass vulnerability. A flaw exists in the data acquisition component due to improperly handling system memory when inspecting traffic. An unauthenticated, remote attacker can exploit thi...

Cisco Firepower Threat Defense Resource Management Error Vulnerability

Cisco Firepower 4100 Series and so on are products of Cisco Corporation.Cisco Firepower 4100 Series is a 4100 series firewall appliance.Cisco 3000 Series Industrial Security Appliances is a Cisco ASA 5500-X Series Firewalls is a 5500-X series firewall appliance.FTD Software is a set of unified...

Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2019-15875)

The Cisco Firepower 2100 Series and Cisco Adaptive Security Virtual Appliance are both products of Cisco Corporation.The Firepower 2100 Series is a 2100 series firewall appliance.The Cisco Adaptive Security Virtual Appliance is a virtualized version of the Cisco ASA Adaptive Security Appliance. T...

Threat Roundup for April 26 to May 3

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between April 26 and May 03. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...

Cisco Firepower Threat Defense Operating System Command Injection Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. An operating system command injection vulnerability exists in Cisco Firepower Threat Defense. The vulnerability arises from the network system or...

Cisco Firepower 2100 Series Firepower Threat Defense Resource Management Error Vulnerability

The Cisco Firepower 2100 Series is a series of network firewalls. A resource management error vulnerability exists in the Cisco Firepower 2100 Series Firepower Threat Defense. The vulnerability arises from improper management of system resources e.g., memory, disk space, files, etc. by a network...

CVE-2019-1699

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting commands into argument...

CVE-2019-1701

Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the WebVPN portal of an affected device. Th...

CVE-2019-1708

A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol MOBIKE feature for the Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an...

CVE-2019-1703

A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense FTD Software for the Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition...

Race condition

A vulnerability in the software cryptography module of the Cisco Adaptive Security Virtual Appliance ASAv and Firepower 2100 Series running Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device that results in a...

CVE-2019-1704

Multiple vulnerabilities in the Server Message Block SMB Protocol preprocessor detection engine for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service DoS condition. For more information about these vulnerabilities,...

CVE-2019-1709

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting commands into argument...

Race condition

A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense FTD Software for the Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition...

Cross site scripting

Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the WebVPN portal of an affected device. Th...

CVE-2019-1703

A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense FTD Software for the Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition...