The vulnerability of the Media Gateway Control Protocol implementation in microprogrammable network devices from Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service interruptions.

The vulnerability of the Media Gateway Control Protocol implementation in microprogrammed network devices of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor...

The vulnerability of the Generic Routing Encapsulation (GRE) protocol in Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.

The vulnerability of the Generic Routing Encapsulation GRE protocol in Cisco Firepower Threat Defense FTD is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cisco Firepower Threat Defense Software Information Disclosure Vulnerability (cisco-sa-ftd-infodis-kZxGtUJD)

An information disclosure vulnerability exists in Cisco Firepower Threat Defense due to insufficient application identification. An unauthenticated, remote attacker can exploit this, via specifically crafted traffic, to disclose potentially sensitive information. see the included Cisco BIDs and...

Cisco Firepower Threat Defense Software IKEv1 DoS (cisco-sa-asa-dos-BqYFRJt9)

A vulnerability exists in the Internet Key Exchange version 1 IKEv1 feature of Cisco Firepower Threat Defense FTD Software due to improper management of system memory. An unauthenticated, remote attacker can exploit this, by sending malicious IKEv1 traffic to an affected device, in order to cause...

Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability (cisco-sa-ftd-dos-2-sS2h7aWe)

According to its version and configuration, the Cisco Firepower Threat Defense FTD Software running on the remote device is affected by a denial of service DoS vulnerability in the generic routing encapsulation GRE tunnel decapsulation feature. The vulnerability is due to a memory handling error...

Cisco Fixes High-Severity Flaws In Firepower Security Software, ASA

Cisco has stomped out 12 high-severity vulnerabilities across several network security products. The flaws can be exploited by unauthenticated remote attackers to launch an array of attacks – from denial of service DoS to sniffing out sensitive data. Specifically affected is Cisco’s Firepower...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Information Disclosure Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Firepower Threat Defense Resource Management Error Vulnerability (CNVD-2020-27774)

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from the U.S. company Cisco Cisco. A resource management error vulnerability exists in the handling of session timeouts used for management connections in Cisco FTD versions prior to...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2020-27108)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center suffers from a cross-site scripting vulnerability that originates from the user interface not adequately validating user-submitted input. An attacker coul...

Cisco Firepower Management Center Trust Management Issues Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center is vulnerable to a trust management issue that arises from a system account that uses a default static password that cannot be changed by the system...

Cisco Firepower Threat Defense Denial of Service Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. A denial of service vulnerability exists in the Secure Sockets Layer SSL/Transport Layer Security TLS processor of the FTD Software in the Cisco...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Denial of Service Vulnerability (CNVD-2020-31111)

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2020-27105)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An input validation error vulnerability exists in Cisco Firepower Management Center. An attacker could exploit this vulnerability by sending a specially crafted HTTP request to an affected...

Cisco Firepower Threat Defense Resource Management Error Vulnerability (CNVD-2020-27776)

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from the U.S. company Cisco Cisco. A resource management error vulnerability exists in the packet processing function in Cisco FTD Software, which stems from inefficient memory...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Denial of Service Vulnerability (CNVD-2020-31104)

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Firepower Management Center File Overwrite Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A file overwrite vulnerability exists in the Web UI in versions prior to Cisco FMC Software Release 6.2.2.2, which can be exploited by a remote attacker to overwrite files on the file syst...

Cisco Firepower Threat Defense Access Control Error Vulnerability (CNVD-2020-27107)

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. An Access Control Error vulnerability exists in Cisco Firepower Threat Defense that stems from incorrect configuration. An attacker could exploit th...

Cisco Firepower Threat Defense and Adaptive Security Appliances Software Buffer Overflow Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Firepower Threat Defense Data Forgery Issue Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. Cisco Firepower Threat Defense is vulnerable to a data forgery issue that stems from incorrect electronic signature verification. An attacker could...

Cisco Firepower Threat Defense Access Control Error Vulnerability (CNVD-2020-27773)

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from the U.S. company Cisco Cisco. An access control error vulnerability exists in Cisco FTD versions 6.3.0, 6.4.0, and 6.5.0, which arises from configuring different administrative...