Cisco Firepower System Software Denial of Service Vulnerability (CNVD-2017-33345)

Cisco 3000 Series Industrial Security Appliances ISR and others are security firewall appliances from Cisco.Firepower System Software is a set of firewall software used in them. A security vulnerability exists in the inspection engine of the Firepower System Software in several Cisco products whe...

Input validation

A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause high CPU utilization or to cause a denial of service DoS condition because the Snort process restarts unexpectedly. The vulnerability is due...

CVE-2017-12244

A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause high CPU utilization or to cause a denial of service DoS condition because the Snort process restarts unexpectedly. The vulnerability is due...

CVE-2017-12244

CVE-2017-12244 affects Cisco Firepower System Software 6.0+ where the detection engine’s IPv6 packet parsing allows an unauthenticated remote attacker to cause high CPU usage/DoS by sending crafted IPv6 extension header packets. Root cause is improper input validation in the IPv6 extension header...

CVE-2017-12244: Improper Input Validation

A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause high CPU utilization or to cause a denial of service DoS condition because the Snort process restarts unexpectedly. The vulnerability is due...

CVE-2017-6766

Cisco Firepower System Software versions 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1, and 6.2.2 contain a vulnerability (CVE-2017-6766) in the SSL Decryption and Inspection feature that allows an unauthenticated, remote attacker to bypass SSL policy for decrypting and inspecting traffic. The issue a...

CVE-2017-6766: Undefined Security Weakness

A vulnerability in the Secure Sockets Layer SSL Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1, and 6.2.2 could allow an unauthenticated, remote attacker to bypass the SSL policy for decrypting and inspecting traffic on an affected...

PT-2017-17304

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions 5.4.0 through 6.2.2 Description A vulnerability in the Secure Sockets Layer SSL Decryption and Inspection feature could allow an unauthenticated, remote attacker to bypass the SSL policy for decrypting...

CVE-2017-6735

Cisco FireSIGHT System Software (FireSIGHT Management Center) is affected by CVE-2017-6735 due to improper handling of modified backup configuration files in the backup and restore functionality. Aauthenticated local attacker can execute arbitrary code on the targeted appliance with root privileg...

CVE-2017-6735

A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute arbitrary code on a targeted system. More Information: CSCvc91092. Known Affected Releases: 6.2.0 6.2.1...

CVE-2017-6735: Improper Input Validation

A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute arbitrary code on a targeted system. More Information: CSCvc91092. Known Affected Releases: 6.2.0 6.2.1...

Cisco FireSIGHT System Software Arbitrary Code Execution Vulnerability

Cisco FireSIGHT Management Center enables centralized management of network security and operational functions for Cisco ASA with FirePOWER Services and Cisco FirePOWER devices. A security vulnerability exists in the Cisco FireSIGHT System Software in the backup and restore functions, which arise...

CVE-2017-6674

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1...

PT-2017-17235

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions 6.0.1 through 6.2.1 Description A vulnerability in the feature-license management functionality could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an...

CVE-2017-6674: Improper Input Validation

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1...

Cisco Firepower System Software Remote Security Bypass Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security vulnerability exists in the feature-license management feature of Cisco Firepower System Software, which stems from a URL filter license that can be disabled. A remote attacker could exploit this...

CVE-2017-6649

CVE-2017-6649 concerns Cisco NX-OS System Software CLI on Cisco Nexus Series Switches. The vulnerability arises from insufficient input validation of command arguments in the CLI, allowing an authenticated, local attacker to inject crafted arguments and read or write arbitrary files outside the i...

PT-2017-17201

Name of the Vulnerable Software and Affected Versions Cisco FirePOWER System Software versions 5.3.0 through 6.2.2 Description A vulnerability in the logging configuration of Secure Sockets Layer SSL policies could allow an unauthenticated, remote attacker to cause a denial of service DoS conditi...

CVE-2017-6632: Uncontrolled Resource Consumption

A vulnerability in the logging configuration of Secure Sockets Layer SSL policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to high consumption of system resources. The vulnerability is du...

CVE-2017-6650: Improper Input Validation

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An...