CVE-2021-1445

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

Design/Logic Flaw

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

Code injection

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

Buffer overflow

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to insufficient boundary checks...

Design/Logic Flaw

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

Input validation

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device that is running in multi-instance mode. This vulnerability is due to...

Input validation

A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...

CVE-2021-1504

CVE-2021-1504 affects Cisco ASA and Firepower Threat Defense (FTD) Software. The issue arises from improper input validation of HTTPS requests, allowing an unauthenticated, remote attacker to trigger a device reload and cause a DoS. Exploitation involves sending a crafted HTTPS request to a vulne...

CVE-2021-1501 Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software SIP Denial of Service Vulnerability

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

CVE-2021-1501

CVE-2021-1501 affects Cisco ASA and Firepower Threat Defense (FTD) SIP inspection engine. The root cause is a crash during a SIP pinhole hash lookup, allowing an unauthenticated remote attacker to crash and reload the device, causing a DoS. Cisco provides software updates addressing this vulnerab...

CVE-2021-1493

CVE-2021-1493 targets Cisco ASA/FTD Web Services Buffer Overflow. The issue stems from insufficient boundary checks in the web services interface, allowing an authenticated remote attacker to send a crafted HTTP request to trigger a buffer overflow, which could disclose data fragments or cause a ...

CVE-2021-1488

Cisco ASA/FTD upgrade-process vulnerability (CVE-2021-1488) allows authenticated, local attackers to inject commands with root privileges due to insufficient input validation in upgrade package handling. Affected devices include ASA Software and FTD Software on Firepower 1000/2100 series. Exploit...

CVE-2021-1488 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000 and 2100 Series Appliances Command Injection Vulnerability

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

CVE-2021-1488 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000 and 2100 Series Appliances Command Injection Vulnerability

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

CVE-2021-1476

CVE-2021-1476 affects Cisco ASA/FTD CLI, where insufficient input validation in command handling allows an authenticated local attacker with admin credentials to execute arbitrary commands on the device OS with root privileges. Affected products are Cisco ASA and Firepower Threat Defense software...

CVE-2021-1448 Cisco Firepower Threat Defense Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device that is running in multi-instance mode. This vulnerability is due to...

CVE-2021-1445

Cisco ASA/FTD Web Services VPN DoS vulnerabilities stem from improper input validation of HTTPS requests. An unauthenticated, remote attacker can exploit this by sending a crafted HTTPS request to an affected device, potentially causing a reload and a DoS condition. Affected products include Cisc...

CVE-2021-1445 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services VPN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

CVE-2021-1445 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services VPN Denial of Service Vulnerabilities

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

CVE-2021-1256

Cisco Firepower Threat Defense (FTD) Software CLI is affected by a local authenticated directory-traversal vulnerability that allows overwriting arbitrary files on the device’s filesystem due to insufficient path validation in a specific CLI command. This can cause system instability and may impa...