CVE-2019-1978: Improper Input Validation

A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to...

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Resource Management Error Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

PT-2019-15954 · Cisco · Cisco Firepower Services Software For Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense Software affected versions not specified Cisco FirePOWER Services Software for ASA affected versions not specified Cisco Firepower Management Center Software affected versions not specified Description: A...

Cisco Adaptive Security Software and Cisco Firepower Threat Defense Buffer Overflow Vulnerabilities

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Resource Management Error Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

The latest on BlueKeep and DejaBlue vulnerabilities — Using Firepower to defend against encrypted DejaBlue

Update 11/04/2019: There have been several public reports of active exploitation of CVE-2019-0708, commonly referred to as “BlueKeep.” Preliminary reports indicate that the vulnerability is being exploited by adversaries who are leveraging access to compromised systems to install cryptocurrency...

Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability (cisco-sa-20191002-fire-bypass)

According to its self-reported VDB version, Cisco Firepower Management Center is affected by a file and malware inspection policy bypass vulnerability, in its VDB component, due to insufficient validation of incoming traffic. An unauthenticated, remote attacker could exploit this, by sending...

The vulnerability of the command-line interface (CLI) of Cisco Firepower Threat Defense microprogramming systems allows a attacker to execute arbitrary commands on the base operating system with root privileges.

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense software exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the base operating system with root privileges...

Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerability (cisco-sa-20191016-firepwr-xss)

According to its self-reported version, Cisco Firepower Management Center is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a...

Cisco Firepower Management Center Software Stored Cross-Site Scripting (XSS) Vulnerability (cisco-sa-20191016-fpwr-xss)

According to its self-reported version, Cisco Firepower Management Center is prior to 6.5.0. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this,...

Cisco Firepower Management Center Multiple Cross-Site Scripting Vulnerabilities (cisco-sa-20191016-firepwr-xss)

According to its self-reported version, Cisco Firepower Management Center is affected by multiple cross-site scripting XSS vulnerabilities due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to...

The vulnerability of the PAM module of Cisco Firepower Threat Defense’s microprogramming network interfaces, as well as the Cisco Firepower Management Center’s network management software and the Cisco FX-OS operating system, allows a perpetrator to trigger a service failure.

The vulnerability of the PAM module of Cisco Firepower Threat Defense’s microprogramming network interfaces, as well as the Cisco Firepower Management Center’s network management software and the Cisco FX-OS operating system, involves an uncontrolled consumption of resources. Exploiting this...

The vulnerability of the implementation of the Open Shortest Path First (OSPF) protocol in microprogrammable network interface devices of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the OSPF protocol implementation in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface of the Cisco Firepower Management Center FMC software management system exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted commands from a remote...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface of the Cisco Firepower Management Center FMC software management system exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted commands from a remote...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-36628)

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. A cross-site scripting vulnerability exists in the web-based...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-36629)

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. A stored cross-site scripting vulnerability exists in the web-based...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-36627)

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. A cross-site scripting vulnerability exists in the web-based...

Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerability

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. A stored cross-site scripting vulnerability exists in the web-based...

CVE-2019-15280

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient...