CVE-2017-6649: Improper Input Validation

A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could...

Cisco Nexus 5000 Series Switches CLI Command Injection Vulnerability (cisco-sa-20170517-nss)

A vulnerability in the CLI of Cisco NX-OS System Software running on Cisco Nexus 5000 Series Switches could allow an authenticated, local attacker to perform a command injection attack. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, a...

PT-2017-17214

Name of the Vulnerable Software and Affected Versions Cisco NX-OS System Software versions 7.1 through 7.3 Description A vulnerability in the CLI could allow an authenticated, local attacker to perform a command injection attack due to insufficient input validation of command arguments. An attack...

CVE-2017-6625

CVE-2017-6625 affects Cisco Firepower System Software (FTD 6.0.0–6.2.2) and ASA with FirePOWER Module when SSL policy is enabled. The root cause is improper SSL policy handling in the access control policy, allowing an authenticated, remote attacker to craft SSL packets that cause the system to s...

CVE-2017-6625: Undefined Security Weakness

A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access control policy of Cisco Firepower System Software could allow an authenticated, remote attacker to cause an affected system to stop inspecting and processing...

PT-2017-17195

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense versions 6.0.0 through 6.2.2 Cisco ASA with FirePOWER Module affected versions not specified Description A vulnerability in the access control policy of Cisco Firepower System Software could allow an authenticate...

CVE-2016-6368

A vulnerability in the detection engine parsing of Pragmatic General Multicast PGM protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is...

CVE-2016-6368

A vulnerability in the detection engine parsing of Pragmatic General Multicast PGM protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is...

CVE-2016-6368: Undefined Security Weakness

A vulnerability in the detection engine parsing of Pragmatic General Multicast PGM protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is...

Cisco Firepower System Software Denial of Service Vulnerability (CNVD-2017-05516)

Cisco Firepower System Software is a next-generation firewall product from Cisco. A security vulnerability exists in Cisco Firepower System Software. A remote attacker could exploit the vulnerability to send a specially crafted HTTP request for a denial of service attack...

CVE-2017-3887

A vulnerability in the detection engine that handles Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco...

CVE-2017-3885

A vulnerability in the detection engine reassembly of Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process consumes a high level of CPU resources. Affected Products...

CVE-2017-3887

CVE-2017-3887 concerns Cisco Firepower System Software’s SSL packet handling in the detection engine when configured with an SSL Decrypt-Resign policy. An unauthenticated, remote attacker could trigger a DoS by causing the Snort process to restart, degrading or bypassing traffic inspection. Affec...

CVE-2017-3885

CVE-2017-3885 is a vulnerability in the Cisco Firepower System Software detection engine reassembly of SSL packets that can be exploited by an unauthenticated, remote attacker to cause a DoS by driving the Snort process to high CPU usage. Affected releases include Cisco Firepower System Software ...

CVE-2017-3885: Uncontrolled Resource Consumption

A vulnerability in the detection engine reassembly of Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process consumes a high level of CPU resources. Affected Products...

CVE-2017-3887: Improper Handling of Exceptional Conditions

A vulnerability in the detection engine that handles Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco...

PT-2017-16157

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions prior to 6.2.0 Description A vulnerability in the detection engine that handles Secure Sockets Layer SSL packets could allow an unauthenticated, remote attacker to cause a denial of service DoS conditio...

Cisco Firepower System Software Security Bypass Vulnerability (CNVD-2017-01166)

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security vulnerability exists in Cisco Firepower System Software. A remote attacker can exploit this vulnerability by adding malicious text to the end of a URL string to bypass security restrictions and perfo...

Information disclosure

A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content, aka a URL Bypass. More Information: CSCvb93980. Known Affected Releases: 5.3.0 5.4.0 6.0.0 6.0.1 6.1.0...

CVE-2017-3814: Improper Input Validation

A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content, aka a URL Bypass. More Information: CSCvb93980. Known Affected Releases: 5.3.0 5.4.0 6.0.0 6.0.1 6.1.0...