CVE-2023-20275

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper...

The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) microprogramming systems allows a perpetrator to bypass the configured access control list.

The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD microprogramming systems relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to bypass the configured...

The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) microprogramming systems allows a perpetrator to bypass the configured access control list.

The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD microprogramming systems relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to bypass the configured...

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software lies in the lack of proper validation of input data, allowing attackers to trigger a Denial-of-Service Attack (DoS).

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service Attack DoS...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to execute arbitrary code.

The vulnerability of the web-based software management interface of the Cisco Firepower Management Center exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management network interface allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Firepower Management Center’s web interface software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to execute arbitrary code.

The vulnerability of the web-based software interface of the Cisco Firepower Management Center exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted commands from a remote location...

The vulnerability of the implementation of the Microsoft Server Message Block (SMB) network protocol in Cisco Firepower Threat Defense (FTD) software allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the Microsoft Server Message Block SMB network protocol implementation in Cisco Firepower Threat Defense FTD exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service Attack DoS...

The vulnerability of the Cisco AnyConnect VPN client software, which is part of the Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) network devices, allows attackers to carry out spoofing attacks.

The vulnerability of the Cisco AnyConnect VPN client software, which is part of the Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems, relates to improper checking of the internal IP address of the packet source. Exploiting this vulnerability allows a malicious...

Cisco Firepower Threat Defense Software VPN Packet Validation (cisco-sa-asa-ssl-vpn-Y88QOm77)

According to its self-reported version, Cisco FTD Software is affected by a VPN packet validation vulnerability that could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper validation of the packet's inner sour...

Cisco Adaptive Security Appliance and Firepower Threat Defense Security Vulnerabilities

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance are both products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. Cisco Adaptive Security Appliance is a network appliance. It is used to...

Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Packet Validation Vulnerability

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper...

The vulnerability of the file loading function of Cisco Firepower Management Center (FMC) software allows a hacker to load any desired files.

The vulnerability of the file loading function of Cisco Firepower Management Center FMC software lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to load any desired files...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

The vulnerability of the Snort module of the microprogramming software for Cisco Firepower Threat Defense (FTD) allows a perpetrator to trigger a service failure.

The vulnerability of the Snort module of the Cisco Firepower Threat Defense FTD software involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause a service failure by triggering a reboot of the Snort intrusion detection system...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

The vulnerability of the application software interface of Cisco Firepower Management Center (FMC) allows a perpetrator to trigger a service failure.

The vulnerability of the application software interface of Cisco Firepower Management Center FMC relates to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending numerous HTTP requests remotely...

The vulnerability of the TLS implementation in Cisco Firepower Threat Defense’s micro-programming network interface devices allows attackers to induce a service failure.

The vulnerability of the TLS protocol implementation in Cisco Firepower Threat Defense’s microprogramming network interfaces is related to improper memory allocation. Exploiting this vulnerability could allow a malicious actor to cause a service failure by triggering a reboot of the Snort intrusi...

The vulnerability of the implementation of TLS and SSL VPN client software from Cisco AnyConnect, which operates within the framework of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD), allows a perpetrator to cause service interruptions.

The vulnerability of the implementation of TLS and SSL VPN client software for Cisco AnyConnect by microprogramming-based network interface controllers from Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to improper cleaning or release of resources...