PT-2023-2257 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions prior to the fixed version Cisco Firepower Threat Defense FTD Software versions prior to the fixed version Description: The issue is related to the deterministic random bit generator DRB...

The vulnerability of the authentication and authorization processes for VPN connections of microprogramming network interfaces of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) is related to access control deficiencies, allowing attackers to gain access to the system under another user’s name.

The vulnerability of the authentication and authorization processes for VPN connections of microprogrammed network interface devices supporting Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to access control deficiencies. Exploiting this vulnerability can...

Cisco Adaptive Security Appliance Software SSL/TLS DoS (cisco-sa-asaftd-sslvpndma-dos-HRrqB9Yx)

A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to inefficient direct memory acce...

The vulnerability of the implementations of TLS and SSL protocols in the microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Firepower Threat Defense (FTD) from the ASA 5500-X Series, Firepower 4100 Series, and Firepower 9300 Series allows attackers to induce service interruptions.

The vulnerability of the implementations of TLS and SSL protocols in microprogrammable network interface devices from Cisco Adaptive Security Appliances ASA and Firepower Threat Defense FTD of the ASA 5500-X Series, Firepower 4100 Series, and Firepower 9300 Series is related to the copying of...

The vulnerability in the secure loading mechanism of microprogramming software for Cisco Firepower Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) series of Cisco Secure Firewalls 3100 allows attackers to circumvent the secure loading mechanism.

The vulnerability of the secure loading mechanism for microprogramming firewalls from Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance, part of the Cisco Secure Firewall 3100 series, is related to the violation of trust boundaries. Exploiting this vulnerability allows attacker...

CVE-2022-20947

A vulnerability in dynamic access policies DAP functionality of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This...

CVE-2022-20928

A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to establish a connection as a different user. This vulnerability is due to...

CVE-2022-20826

CVE-2022-20826 affects Cisco Secure Firewalls 3100 Series running ASA or FTD software. Root cause is a logic error in the secure boot boot process, enabling an unauthenticated attacker with physical access to bypass secure boot, inject code at a specific memory location, and execute persistent co...

Vulnerabilities fixed in Cisco products

Vulnerabilities have been fixed in the following Cisco products: Cisco Adaptive Security Appliance ASA. Cisco Firepower Management Center Cisco Firepower Threat Defense Cisco Secure Firewall Snort The vulnerabilities allow a malicious party to launch attacks execute attacks that result in the...

Cisco Firepower Threat Defense 安全漏洞

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance are both products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. Cisco Adaptive Security Appliance is a network appliance. Used to protect...

Cisco Firepower Threat Defense 和 Cisco Adaptive Security Appliance 输入验证错误漏洞

Cisco Firepower Threat Defense FTD and others are products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services.Cisco Adaptive Security Appliance is Cisco Adaptive Security Appliance is a network appliance. proto, etc...

PT-2022-5686 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the SSL/TLS client could allow an authenticated, remote...

PT-2022-6147 · Cisco · Cisco Firepower Software For Adaptive Security Appliance (Asa) Firepower Module +2

Name of the Vulnerable Software and Affected Versions: Cisco FirePOWER Software for Adaptive Security Appliance ASA FirePOWER module affected versions not specified Cisco Firepower Management Center FMC Software affected versions not specified Cisco Next-Generation Intrusion Prevention System NGI...

Cisco Adaptive Security Appliance Software和Firepower Threat Defense（FTD）Software 缓冲区错误漏洞

Cisco ASA and Cisco Adaptive Security Appliance are both products of Cisco Cisco.Cisco ASA is a series of firewalls applied to enterprise security.Cisco Adaptive Security Appliance is a network appliance. Cisco Adaptive Security Appliance is a network appliance used to protect corporate networks...

PT-2022-6087 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the dynamic access policies DAP functionality is due to...

The vulnerability of the Clientless SSL VPN (WebVPN) component of the Cisco Adaptive Security Appliance Software (ASA) allows a attacker to perform a “HTTP request hijacking” attack.

The vulnerability of the Clientless SSL VPN WebVPN component of the Cisco Adaptive Security Appliance Software ASA relates to deficiencies in HTTP request processing. Exploiting this vulnerability could allow a malicious actor to carry out an “HTTP request hijacking” attack...

The vulnerability of RSA key-generation functions in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to calculate secret RSA keys.

The vulnerability of RSA key exchange functions in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the use of strictly encrypted credentials. Exploiting this vulnerability allows a malicious actor ...

Cisco Releases Security Update for Multiple Products

Cisco has released a security update to address a vulnerability affecting Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software. This vulnerability could allow a remote attacker to obtain sensitive information. For updates addressing lower severity vulnerabilities, see...

Vulnerabilities fixed in Cisco Adaptive Security Appliance

Vulnerabilities have been fixed in Cisco ASA. The vulnerabilities allow a malicious party to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Remote code execution User Rights Access to sensitive data Cisco has released updates to...

CVE-2022-20713

A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device. This vulnerability is du...