CVE-2023-20270

CVE-2023-20270 concerns Cisco Firepower Threat Defense Software where the SMB protocol preprocessor and Snort 3 detection engine interaction is flawed due to improper error-checking when processing SMB traffic. An unauthenticated, remote attacker could send crafted SMB streams to bypass policies ...

CVE-2019-12678

The CVE-2019-12678 issue affects Cisco ASA/FTD SIP inspection: an unauthenticated remote attacker can send malicious SIP packets to trigger an integer underflow in the SIP parsing module, causing the device to read unmapped memory and crash. Root cause: improper SIP message parsing in the SIP ins...

CVE-2020-3167

CVE-2020-3167 covers a CLI command injection vulnerability in Cisco FXOS Software and Cisco UCS Manager Software. The issue stems from insufficient input validation in CLI commands, allowing an authenticated, local attacker to inject crafted arguments and execute arbitrary OS commands with the pr...

CVE-2020-3373

Cisco ASA software and Firepower Threat Defense (FTD) are affected by CVE-2020-3373: an IP fragment-handling memory leak caused by improper error handling during IP fragment reassembly. An unauthenticated remote attacker could send crafted fragmented IPv4/IPv6 traffic to exhaust memory, degrade t...

CVE-2026-20049

CVE-2026-20049 affects Cisco Secure Firewall ASA and Threat Defense (FTD) software. The issue arises in processing GCM-encrypted IKEv2 IPsec traffic due to an insufficiently sized memory allocation, enabling an authenticated attacker to trigger a device reload and DoS. Exploitation requires valid...

CVE-2019-12698

Cisco ASA Software and Cisco FTD WebVPN CPU Denial of Service (CVE-2019-12698) allows unauthenticated remote attackers to trigger high CPU by repeated WebVPN HTTP page requests, causing DoS. Affected ASA/FTD versions are mitigated by Cisco software updates; there are no supported workarounds per ...

CVE-2022-20730

Cisco Firepower Threat Defense (FTD) is affected by CVE-2022-20730, a Security Intelligence DNS feed bypass vulnerability caused by incorrect feed update processing. An unauthenticated, remote attacker could bypass DNS feed protections and send blocked traffic through an affected device, potentia...

CVE-2022-20946

Cisco Firepower Threat Defense (FTD) Software is affected by CVE-2022-20946, a memory-handling error in GRE tunnel decapsulation that can be exploited by unauthenticated remote attackers to restart the device and cause DoS. The issue affects GRE processing in FTD; exploitation requires sending a ...

CVE-2019-12700

The CVE-2019-12700 issue affects Cisco Firepower Threat Defense (FTD), Cisco Firepower Management Center (FMC), and Cisco FXOS Software. It is caused by improper resource management in PAM user session handling, enabling an authenticated remote attacker to exhaust system resources by initiating m...

CVE-2022-20922

The CVE-2022-20922 entry concerns multiple vulnerabilities in the SMB2 processor of the Snort detection engine on Cisco products (Snort 3 configured). Affected component: Snort SMB2 processing; root cause: improper management of system resources while handling SMB2 traffic. Impact: unauthenticate...

CVE-2022-20928

CVE-2022-20928 describes a VPN authorization bypass in Cisco ASA/FTD where a flaw in the VPN authentication flow’s authorization verifications allows an unauthenticated remote attacker (with valid credentials) to establish a VPN session as a different user. The impact is privilege propagation wit...

CVE-2023-20246

CVE-2023-20246 describes a vulnerability in Snort access control policies affecting multiple Cisco products, where a logic error during policy population could allow an unauthenticated, remote attacker to bypass configured access control rules. The impact is bypass of access controls with network...

CVE-2019-15256

CVE-2019-15256 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software in the IKEv1 feature. The root cause is improper management of system memory, allowing an unauthenticated, remote attacker to send malicious IKEv1 traffic and trigger a reload, causing a DoS. The attack do...

CVE-2023-20031

The CVE-2023-20031 issue affects Cisco Firepower Threat Defense (FTD) with Snort 3, where a logic error in SSL/TLS certificate handling during SSL handshake under load can be exploited by a high rate of connection requests to cause the Snort 3 engine to reload. Consequences documented include pot...

CVE-2020-3585

The CVE-2020-3585 issue affects Cisco ASA/FTD software for Cisco Firepower 1000 Series and is due to improper countermeasures against the Bleichenbacher RSA-TLS vulnerability in the TLS handler. An unauthenticated remote attacker could exploit crafted TLS messages to make the device act as an ora...

CVE-2022-20854

The CVE-2022-20854 issue affects Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software, caused by improper error handling during SSH session establishment. An unauthenticated, remote attacker sending a high rate of crafted SSH connections can exhaust resources, leadi...

CVE-2024-20261

CVE-2024-20261 affects Cisco Firepower Threat Defense (FTD) Software via the file policy feature that inspects encrypted archive files. The issue is a logic error triggered when inspecting a specific class of encrypted archives, allowing an unauthenticated, remote attacker to bypass a configured ...

CVE-2024-20268

CVE-2024-20268 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) SNMP feature. The issue is caused by insufficient input validation of SNMP packets, allowing an authenticated, remote attacker to trigger a device reload and cause a DoS. The vulnerability affects all SNMP versions (1/2c/3)...

CVE-2021-1422

CVE-2021-1422 affects Cisco ASA Software Release 9.16.1 and Cisco FTD Software Release 7.0.0. The issue is a logic error in the software cryptography module that handles certain decryption errors over an established IPsec connection, causing an abnormal device reload and a DoS. The vulnerability’...

CVE-2021-1495

CVE-2021-1495 affects Cisco Snort detection engine used in multiple Cisco products. The flaw arises from incorrect handling of specific HTTP header parameters, enabling an unauthenticated, remote attacker to bypass a configured HTTP File Policy by sending crafted HTTP packets, potentially deliver...

CVE-2021-34791

Cisco ASA and Firepower Threat Defense (FTD) software contain multiple ALG/NAT bypass vulnerabilities (NAT Slipstreaming) due to an incorrect implementation of security checks in the ALG/NAT handling, allowing unauthenticated remote actors to bypass the ALG and open unauthorized connections behin...

CVE-2026-20073

Cisco Secure Firewall ASA and FTD platforms are affected by CVE-2026-20073 due to improper error handling when a cluster-joining device runs out of memory while replicating access control rules. An unauthenticated remote attacker could send traffic that should be blocked, potentially bypassing AC...

CVE-2020-3186

The CVE-2020-3186 entry concerns Cisco Firepower Threat Defense (FTD) Software where the management interface access lists can be misconfigured so that ports allowed in one list are denied in another. This permits an unauthenticated, remote attacker to bypass the management ACLs by sending crafte...

CVE-2023-20245

CVE-2023-20245 affects Cisco ASA and Cisco FTD where multiple vulnerabilities in the per-user-override feature can allow an unauthenticated, remote attacker to bypass configured ACLs and let denied traffic flow through an affected device. The issues stem from a logic error in how per-user-overrid...

CVE-2018-0240

CVE-2018-0240 affects Cisco ASA/FTD Application Layer Protocol Inspection. The vulnerability stems from logical errors in the inspection logic, allowing an unauthenticated, remote attacker to send high volumes of malicious traffic and trigger a deadlock that reloads the device (DoS). Affected sof...

CVE-2019-1982

Cisco Firepower family components (FTD, FWS for ASA, and FMC) are affected by CVE-2019-1982, a vulnerability in the HTTP traffic filtering module where improper handling of HTTP requests with malicious headers (including HTTPS) can let an unauthenticated remote attacker bypass filtering protectio...

CVE-2021-34783

CVE-2021-34783 affects Cisco ASA and Firepower Threat Defense (FTD) software’s SSL/TLS decryption path. The vulnerability arises from insufficient validation of SSL/TLS messages in the software-based TLS handler, allowing an unauthenticated, remote attacker to force a device reload and cause a Do...

CVE-2018-0227

CVE-2018-0227 affects Cisco ASA/FTD SSL VPN Client Certificate Authentication. Root cause: incorrect verification of the SSL Client Certificate, enabling an unauthenticated, remote attacker to establish an SSL VPN connection and bypass certificate verification. Affected products include ASA/FTD s...

CVE-2020-3283

CVE-2020-3283 affects Cisco Firepower Threat Defense (FTD) on the 1000 Series. The vulnerability resides in the SSL/TLS handler and stems from a communication error between internal functions, which can be exploited by an unauthenticated remote attacker sending a crafted SSL/TLS message to trigge...

CVE-2021-1501

CVE-2021-1501 affects Cisco ASA and Firepower Threat Defense (FTD) SIP inspection engine. The root cause is a crash during a SIP pinhole hash lookup, allowing an unauthenticated remote attacker to crash and reload the device, causing a DoS. Cisco provides software updates addressing this vulnerab...

CVE-2021-34781

The CVE-2021-34781 issue affects Cisco Firepower Threat Defense (FTD) Software in multi-Instance deployments, where improper error handling during SSH session establishment allows an unauthenticated, remote attacker to trigger resource exhaustion and a DoS condition. Exploitation involves sending...

CVE-2021-34792

Cisco CVE-2021-34792 affects Cisco ASA Software and Firepower Threat Defense (FTD) due to a memory management/resource handling flaw under high connection rates. An unauthenticated, remote attacker could cause a DoS by opening a large number of connections, potentially causing the device to reloa...

CVE-2022-20940

Cisco Firepower Threat Defense (FTD) Software is affected by a Bleichenbacher-related information disclosure in the TLS handler and SSL decryption policy implementation. The root cause is improper countermeasures against Bleichenbacher attacks, allowing an unauthenticated remote attacker to poten...

CVE-2022-20943

CVE-2022-20943 pertains to Cisco Snort SMB2 processing. The SMB2 processor in Snort 3 (on affected Cisco products) is vulnerable to resource-management issues when handling SMB2 traffic, enabling unauthenticated remote attackers to bypass policies or cause DoS by sending high rates of SMB2 packet...

CVE-2026-20006

CVE-2026-20006 concerns Cisco Secure Firewall Threat Defense software. It reports a vulnerability in the TLS cryptography functionality of Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Engine to restart, resulting in a denial of service. The is...

CVE-2020-3305

The CVE-2020-3305 issue affects Cisco ASA and Firepower Threat Defense (FTD) where the BGP module incorrectly processes certain BGP packets. An unauthenticated, remote attacker can craft BGP traffic to trigger a denial of service on the affected device. Multiple connected documents corroborate a ...

CVE-2020-3306

CVE-2020-3306 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) DHCP module. The root cause is incorrect processing of certain DHCP packets, which an unauthenticated remote attacker can exploit by sending a crafted DHCP packet to cause an on-device denial of service. Public docu...

CVE-2020-3565

CVE-2020-3565 affects Cisco Firepower Threat Defense (FTD) Software. The TCP Intercept feature can be triggered when the embryonic connection limit is reached, causing the detection engine to misprocess packets. An unauthenticated, remote attacker could craft traffic that matches a policy with TC...

CVE-2020-3571

Cisco Firepower 4110 appliances running FTD software are affected by CVE-2020-3571 due to incomplete input validation in ICMP ingress packet processing, which could allow an unauthenticated remote attacker to exhaust memory and cause an unintended reload (DoS). The issue affects ICMP/ICMPv6 handl...

CVE-2021-34704

CVE-2021-34704 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Web Services. The issue stems from improper input validation when parsing HTTPS requests, allowing an unauthenticated remote attacker to trigger a reload and cause a DoS. Multiple connected sources confirm a DoS vi...

CVE-2022-20950

Cisco Firepower Threat Defense (FTD) is affected by CVE-2022-20950 due to a lack of error-checking when SIP bidirectional flows are inspected by Snort 3. The vulnerability allows an unauthenticated, remote attacker to trigger a restart of the Snort 3 detection engine, causing a DoS condition. A c...

CVE-2026-20069

The CVE-2026-20069 entry covers a vulnerability in the VPN web services component of Cisco Secure Firewall ASA and FTD software. The issue arises from improper validation of HTTP requests, which could allow an unauthenticated, remote attacker to persuade a user to visit a crafted site that sends ...

CVE-2019-1693

The CVE-2019-1693 issue affects Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software, specifically the WebVPN portal. The root cause is improper management of authenticated WebVPN sessions, which can be exploited by an attacker with valid credentials ...

CVE-2021-1256

Cisco Firepower Threat Defense (FTD) Software CLI is affected by a local authenticated directory-traversal vulnerability that allows overwriting arbitrary files on the device’s filesystem due to insufficient path validation in a specific CLI command. This can cause system instability and may impa...

CVE-2024-20426

CVE-2024-20426 affects Cisco ASA and Cisco FTD (IKEv2). A vulnerability in IKEv2 input validation could allow an unauthenticated, remote attacker to cause a DoS by sending crafted IKEv2 traffic, potentially causing the device to reload. Cisco advisory states updates addressing the vulnerability h...

CVE-2026-20053

Cisco CVE-2026-20053 affects multiple Cisco products via Snort 3 Visual Basic for Applications (VBA) Decompression Engine. The vulnerability stems from improper range checking when decompressing VBA data, which is user-controlled, enabling an unauthenticated, remote attacker to cause the Snort 3 ...

CVE-2018-15398

Cisco ASA and Cisco FTD software contain a vulnerability in the per-user-override feature that could allow an unauthenticated, remote attacker to bypass an interface ACL. The fix/workaround details are not provided in the connected documents; exploitation would require network access through a vu...

CVE-2019-12695

CVE-2019-12695 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) WebVPN portals. The issue arises from insufficient validation of user-supplied input in the web-based management interface, enabling an unauthenticated, remote attacker to lure a user into clicking a crafted link and execut...

CVE-2020-3317

Cisco Firepower Threat Defense (FTD) SSL Input Validation (CVE-2020-3317) is caused by insufficient input validation in the ssl_inspection component, leading to denial of service by crashing Snort instances when processing a malformed TLS packet through an ASA. Affected product: Cisco FTD softwar...

CVE-2020-3458

The CVE-2020-3458 entries describe multiple vulnerabilities in the secure boot process of Cisco ASA and Firepower Threat Defense (FTD) software on Firepower 1000/2100 series appliances. A local, authenticated attacker could bypass the chain of trust by injecting code into specific files used duri...