Cisco Adaptive Security Appliance Software IP Fragment Memory Leak (cisco-sa-asaftd-frag-memleak-mCtqdP9n)

According to its self-reported version, Cisco Adaptive Security Appliance Software is affected by a vulnerability in the IP fragment-handling implementation. This allows an unauthenticated, remote attacker to cause a memory leak on an affected device. This memory leak could prevent traffic from...

Better Real User Monitoring with BoomerangJS and Akamai mPulse

In this blog, we'll walk through a few different snippet insertion methods and available optimizations. Akamai's real user monitoring RUM solution, mPulse, uses a bit of JavaScript code an mPulse snippet and the BoomerangJS library to collect performance data from a user's Web browser. However, t...

Cisco Adaptive Security Appliance Software Bleichenbacher Attack (cisco-sa-asaftd-tls-bb-2g9uWkP)

According to its self-reported version, the TLS handler of Cisco Adaptive Security Appliance ASA Software for Cisco Firepower 1000 is affected by the Bleichenbacher attack vulnerability due to improper implementation of countermeasures against the Bleichenbacher attack for cipher suites that rely...

The vulnerability of the command-line interface (CLI) of microprogramming software for Cisco Adaptive Security Appliance Software (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the command-line interface CLI of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD lies in the lack of measures to neutralize the special elements used in operating system commands. Exploiting this vulnerability can allow attackers to...

Cisco Adaptive Security Appliance Software DoS (cisco-sa-asaftd-dos-QFcNEPfx)

According to its self-reported version, the TCP packet processing of Cisco Adaptive Security Appliance Software is affected by denial of service vulnerability due to a memory exhaustion condition. An unauthenticated, remote attacker can exploit this by sending a high rate of crafted TCP traffic...

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software (ASA) and Cisco Firepower Threat Defense (FTD) relates to session timeout errors, which allow attackers to trigger a device reboot or cause a service failure.

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to session timeout errors. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service...

The vulnerability of Microprogramming Software for Cisco Adaptive Security Appliance Software (ASA) and Cisco Firepower Threat Defense (FTD) relates to writing beyond the buffer boundaries, allowing attackers to trigger a system reboot or cause service failure.

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot or caus...

The vulnerability of Microprogramming Software for Cisco Adaptive Security Appliance Software (ASA) and Cisco Firepower Threat Defense (FTD) relates to writing beyond the buffer boundaries, allowing attackers to trigger a system reboot or cause service failure.

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot or caus...

The vulnerability of Microprogramming-based Network Interface Software of Cisco Adaptive Security Appliance Software (ASA) and Cisco Firepower Threat Defense (FTD) lies in the copying of buffers without checking the size of the input data. This allows attackers to compromise the confidentiality and accessibility of the protected information.

The vulnerability of Microprogramming Software for Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to compromise the...

CVE-2021-1493

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to insufficient boundary checks...

CVE-2021-1476

A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...

CVE-2021-1501

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

CVE-2021-1504

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

CVE-2021-1504

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

CVE-2021-1488

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

CVE-2021-1445

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

Input validation

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

CVE-2021-1504

CVE-2021-1504 affects Cisco ASA and Firepower Threat Defense (FTD) Software. The issue arises from improper input validation of HTTPS requests, allowing an unauthenticated, remote attacker to trigger a device reload and cause a DoS. Exploitation involves sending a crafted HTTPS request to a vulne...

UBUNTU-CVE-2021-28899

Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16...

Cisco Adaptive Security Appliance and Firepower Threat Defense Denial of Service Vulnerabilities

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance are both products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. Cisco Adaptive Security Appliance is a network appliance. Used to protect...