CVE-2019-12675: DEPRECATED: Containment Errors (Container Errors)

Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to...

PT-2019-3817 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue exists due to insufficient validation of incoming traffic, allowing a remote attacker to bypass file and malware inspection policies by...

The vulnerability of the application configuration mechanism of Cisco Firepower Threat Defense software allows attackers to gain access to protected information.

The vulnerability of the application configuration mechanism of Cisco Firepower Threat Defense microprogramming network interfaces arises due to errors in application identification. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected...

The vulnerability of the NULL character detection function in Cisco Firepower Threat Defense’s network interface controllers, as well as in Cisco FirePOWER Services Software for ASA and Cisco Firepower Management Center’s network management software, allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of the NULL character detection function in Cisco Firepower Threat Defense’s microprogramming network interface cards, as well as in Cisco FirePOWER Services Software for ASA and Cisco Firepower Management Center’s network management software, stems from errors in command text...

The vulnerability of the components responsible for checking microprogramming software-based network interface controllers in Cisco Firepower Threat Defense, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center network management software allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of the components responsible for detecting protocols in Microprogrammable Network Interface Cards from Cisco Firepower Threat Defense, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center software arises due to errors in detecting initial protocol...

The vulnerability of the component responsible for checking the protocols of Microprogrammable Network Interface Cards from Cisco Firepower Threat Defense allows attackers to circumvent existing access control policies.

The vulnerability of the component responsible for processing SSL/TLS messages in Cisco Firepower Threat Defense microprogramming systems arises from errors in their processing of these messages. Exploiting this vulnerability allows a malicious actor to bypass existing access control policies by...

The vulnerability of the HTTP traffic filtering component of Cisco Firepower Threat Defense’s micro-programming-based network interface controllers, as well as Cisco FirePOWER Services Software for ASA and Cisco Firepower Management Center’s network management software, allows attackers to influence the integrity of protected information.

The vulnerability of the HTTP traffic filtering component in Cisco Firepower Threat Defense, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center software is caused by errors in HTTP request processing. Exploiting this vulnerability allows a malicious actor to influenc...

The vulnerability in the web interface of the software-hardware management interface for Cisco Firepower Management Center allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability in the web interface of the software-hardware management interface for Cisco Firepower Management Center exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially create...

Cisco Firepower Threat Defense Software Information Disclosure Vulnerability

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software, which could allow an unauthenticated, remote attacker to gain unauthorized read access to...

Cisco NX-OS Software and Cisco FXOS Software Input Validation Error Vulnerability

Cisco Firepower 4100 Series and others are products of Cisco Corporation.Cisco Firepower 4100 Series is a 4100 series firewall appliance.Cisco FXOS Software is a set of firewall software running in Cisco security appliances.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco MDS 9000...

Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability (cisco-sa-20190816-ftd-http)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the HTTP traffic filtering component due to improper handling of HTTP requests. An attacker may exploit this vulnerability by sending malicious requests to an affected device, which...

Cisco Firepower Threat Defense Access Control Error Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. An access control error vulnerability exists in the application configuration in Cisco FTD versions prior to 6.4.0.4, which can be exploited by a...

Cisco Firepower Threat Defense (FTD) VPN SAML Authentication Bypass Vulnerability (cisco-sa-20190501-asaftd-saml-vpn)

According to its self-reported version, the Cisco Firepower Threat Defense FTD Software is affected by an authentication bypass vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 Single Sign-On SSO for Clientless SSL VPN WebVPN and AnyConnect Remote Access VPN. The...

CVE-2019-12627

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could...

CVE-2019-12627

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could...

Authorization

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could...

CVE-2019-12627 Cisco Firepower Threat Defense Software Information Disclosure Vulnerability

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could...

CVE-2019-12627 Cisco Firepower Threat Defense Software Information Disclosure Vulnerability

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could...

Cisco Firepower Threat Defense Software Information Disclosure Vulnerability

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could...

PT-2019-3167

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense Software affected versions not specified Description The issue is related to insufficient application identification in the application policy configuration, which could allow a remote attacker to gain unauthoriz...