CISCO-CVE-2020-3452-Scanner-Exploiter

CISCO CVE-2020-3452 スキャナー & エクスプロイター Shodanから対象サーバーをスキャンし、CVE-2020-3452（Cisco Adaptive Security ApplianceおよびFTDにおける不正なリモートファイル読み取り）に対して脆弱なサーバーを特定します。 概要 Cisco Adaptive Security Appliance ASA ソフトウェアおよび Cisco Firepower Threat Defense FTD...

CVE-2020-3452

CVE-2020-3452 CVE-2020-3452 - Cisco ASA および Cisco Firepower Threat Defense におけるディレクトリトラバーサル このユーティリティは、教育および倫理的なテスト目的のみで作成されています。事前の相互同意なしにこのスクリプトを使用してターゲットを攻撃することは違法です。適用されるすべての地域、州、連邦の法律を遵守する責任はエンドユーザーにあります。開発者は一切の責任を負わず、このプログラムによって引き起こされた誤用や損害についても責任を負いません。...

cve-2020-3452

cve-2020-3452 Cisco ASA & Firepower における未認証ファイル読み取り インストール git clone https://github.com/Loneyers/cve-2020-3452 && cd cve-2020-3452 && go build 使い方 ./cve-2020-3452 url.txt 40...

cisco_asa_research

Cisco ASA 研究 本仓库包含在 Black Hat USA 2022 和 DEF CON 30 上展示的幻灯片和代码。包含以下内容： 幻灯片 DEF CON 30 和 Black Hat 的幻灯片合集。由于 DEF CON 的时间段更长，其幻灯片合集略长一些。 theway - 一个用于为 Cisco ASA 创建恶意/可分发 ASDM 包的工具 CVE-2022-20829。 whatsup - 一个用于创建恶意/可分发的 Cisco FirePOWER 模块安装包的工具（无 CVE）。 pinchme - 一个用于创建恶意/可分发的 Cisco FirePOWER...

CVE-2020-3452

CVE-2020-3452 Cisco ASA および Cisco Firepower における認証なしファイル読み取り Saikat Karmakar | 2021年11月 このスクリプトは、対象ホストがCVE-2020-3452に対して脆弱かどうかをテストします。 必要条件: requests termcolor 使用法: darklord@kali: python3 cve-2020-3452.py -h usage: cve-2020-3452.py -h -u U -f F CVE-2020-3452 Vulnerability Test optional arguments:...

Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processe...

CVE-2017-7522

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:52+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw 2026-09-02 01:03:29+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw 2026-09-08 20:00:04+00:00| published-proof-of-concept|...

Cisco Firepower Threat Defense (FTD) Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated,...

Cisco ASA/FTD Persistent Local Code Execution (CVE-2024-20359)

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plugins and that has been available in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary code wi...

Cisco ASA/FTD WebVPN Double Free (CVE-2018-0101)

A vulnerability in the Secure Sockets Layer SSL VPN functionality of the Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a...

Cisco ASA/FTD Web Services Infinite Loop (CVE-2024-20353)

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. - A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol processing of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software,...

Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)

According to its self-reported version, Cisco IOS Software is affected by a vulnerability. - A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol processing of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and Cis...

Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability. - A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol processing of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco...

Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol processing of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and...

Cisco Firepower Threat Defense (FTD) Software IKEv2 DoS Vulnerabilities (cisco-sa-asaftd-ikev2-dos-eBueGdEG)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a...

Cisco Firepower Threat Defense (FTD) Software OSPF DoS Vulnerabilities (cisco-sa-asaftd-ospf-ZH8PhbSW)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

New Linux FIRESTARTER Backdoor Targets Cisco Firepower Devices

CISA and NCSC warn that FIRESTARTER, a Linux-based backdoor, targets Cisco Firepower devices, evades patches, and enables persistent access even after firmware updates...

FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches

The U.S. Cybersecurity and Infrastructure Security Agency CISA has revealed that an unnamed federal civilian agency's Cisco Firepower device running Adaptive Security Appliance ASA software was compromised in September 2025 with a new malware called FIRESTARTER. FIRESTARTER, per CISA and the U.K....

UAT-4356's Targeting of Cisco Firepower Devices

Cisco Talos is aware of UAT-4356's continued active targeting of Cisco Firepower devices' Firepower eXtensible Operating System FXOS. UAT-4356 exploited n-day vulnerabilities CVE-2025-20333 and CVE-2025-20362 to gain unauthorized access to vulnerable devices, where the threat actor deployed their...