CVE-2020-3189

CVE-2020-3189 affects Cisco Firepower Threat Defense (FTD) Software VPN System Logging. Root cause: memory not properly freed for VPN System Logging events when a VPN session is created or deleted, allowing a remote, unauthenticated attacker to repeatedly create/delete VPN tunnels to leak memory ...

CVE-2020-3255

Cisco Firepower Threat Defense (FTD) Software contains a DoS vulnerability in the packet processing path caused by inefficient memory management. A remote, unauthenticated attacker can send a high rate of IPv4/IPv6 traffic that matches an ACL block action, triggering memory exhaustion and DoS for...

CVE-2020-3550

Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) sfmgr daemon suffers directory-traversal due to insufficient input validation, allowing an authenticated, remote attacker to use relative paths in sfmgr commands to read/write arbitrary files on an sftunnel-connected...

CVE-2017-6632

Cisco FirePOWER System Software SSL Logging DoS (CVE-2017-6632) affects 5.3.0–6.2.2 when SSL policy logging is enabled. An unauthenticated remote attacker can cause a DoS by sending a flood of crafted TCP packets, due to mis‑configurable SSL logging of certain TCP traffic. Impact is high availabi...

CVE-2019-1695

The CVE-2019-1695 issue affects Cisco ASA and Cisco FTD, where the detection engine improperly filters Ethernet frames, allowing an unauthenticated, adjacent attacker to bypass Layer 2 filters and send data directly to the kernel via crafted packets to the management interface. This can trigger a...

CVE-2021-34753

Cisco Firepower Threat Defense (FTD) Software is affected by CVE-2021-34753 due to incomplete deep packet inspection in ENIP traffic processing, enabling unauthenticated remote bypass of configured ENIP access control and intrusion policies. The vulnerability concerns the payload inspection compo...

CVE-2021-40116

CVE-2021-40116 affects Cisco products using Snort3 when a rule with Block with Reset or Interactive Block with Reset is configured without proper constraints. A crafted IP packet can cause a DoS by dropping through traffic; Snort2 configurations are not affected. Connected sources confirm the vul...

CVE-2023-20177

Cisco Firepower Threat Defense (FTD) Software contains a vulnerability in the SSL file policy handling when an SSL/TLS connection uses a URL Category and the Snort 3 detection engine is involved. The issue is a logic error observed as the Snort 3 engine inspects such connections, potentially caus...

CVE-2024-20268

CVE-2024-20268 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) SNMP feature. The issue is caused by insufficient input validation of SNMP packets, allowing an authenticated, remote attacker to trigger a device reload and cause a DoS. The vulnerability affects all SNMP versions (1/2c/3)...

CVE-2024-20494

CVE-2024-20494 affects Cisco ASA and Firepower Threat Defense (FTD) TLS cryptography during the TLS 1.3 handshake. The issue arises from improper data validation, allowing unauthenticated remote attackers to trigger a device reload via a crafted TLS 1.3 packet on a TLS 1.3-enabled listening socke...

CVE-2024-20495

The CVE-2024-20495 issue affects Cisco ASA and Cisco FTD’s Remote Access VPN feature. The root cause is improper validation of client key data after the TLS session is established, enabling an unauthenticated, remote attacker to force the device to reload and trigger a DoS. Public documents from ...

CVE-2019-1687

CVE-2019-1687 describes a DoS vulnerability in Cisco ASA/FTD TCP proxy handling. The issue is due to an error in TCP-based packet inspection that can cause a crafted TCP sequence to produce an invalid Layer 2 header, potentially causing the device to restart. The affected products are Cisco Adapt...

CVE-2020-3514

CVE-2020-3514 describes a Cisco Firepower Threat Defense (FTD) Software multi-instance container escape. An authenticated, local attacker with valid device credentials could modify a startup container configuration file to escape the container and execute commands with root privileges in the host...

CVE-2023-20256

CVE-2023-20256 relates to multiple vulnerabilities in the per-user-override feature of Cisco ASA and FTD software that could let an unauthenticated, remote attacker bypass ACLs and reach normally protected resources. The root cause is a logic error in how per-user-override rules are constructed/a...

CVE-2018-15388

The CVE-2018-15388 issue affects Cisco ASA and Cisco FTD WebVPN login functionality. Root cause: excessive processing load for existing WebVPN login operations leads to unauthenticated remote attackers sending multiple login requests, increasing CPU usage and causing a DoS. Documented impact: ele...

CVE-2019-1691

Cisco Firepower Threat Defense Software’s SNORT detection engine is affected by an SSL/TLS handshake handling issue that allows an unauthenticated remote attacker to trigger an unexpected restart, causing a partial DoS while the engine restarts. Affected are FTD versions prior to 6.2.3.4 due to i...

CVE-2020-3196

Cisco CVE-2020-3196 describes a memory exhaustion DoS in the SSL/TLS handler of ASA Software and FTD Software. An unauthenticated, remote attacker can open multiple SSL/TLS connections under certain conditions to exhaust device memory, causing the device to stop accepting new SSL/TLS connections ...

CVE-2020-3555

The CVE-2020-3555 issue affects Cisco ASA and Cisco Firepower Threat Defense (FTD) SIP inspection. The root cause is a watchdog timeout during cleanup of threads tied to a SIP connection being removed from the connection list, which can be triggered by a high rate of crafted SIP traffic. The impa...

CVE-2024-20363

CVE-2024-20363 affects multiple Cisco products due to a vulnerability in the Snort 3 IPS rule engine caused by incorrect HTTP packet handling. An unauthenticated, remote attacker can exploit crafted HTTP traffic to bypass configured IPS rules, allowing uninspected traffic onto the network. Affect...

CVE-2017-3822

CVE-2017-3822 describes an unauthenticated remote vulnerability in the logging subsystem of Cisco Firepower Threat Defense (FTD) when FDM (Firepower Device Manager) is enabled. The issue allows an attacker to add arbitrary entries to the audit log due to inadequate input validation in the FDM web...

CVE-2021-1488

Cisco ASA/FTD upgrade-process vulnerability (CVE-2021-1488) allows authenticated, local attackers to inject commands with root privileges due to insufficient input validation in upgrade package handling. Affected devices include ASA Software and FTD Software on Firepower 1000/2100 series. Exploit...

CVE-2017-6625

CVE-2017-6625 affects Cisco Firepower System Software (FTD 6.0.0–6.2.2) and ASA with FirePOWER Module when SSL policy is enabled. The root cause is improper SSL policy handling in the access control policy, allowing an authenticated, remote attacker to craft SSL packets that cause the system to s...

CVE-2019-1708

CVE-2019-1708 affects Cisco ASA and Cisco FTD, where MOBIKE processing vulnerability can cause unauthenticated remote attackers to trigger memory leak or device reload, leading to DoS. Root cause: incorrect handling of certain MOBIKE packets. Impact: memory exhaustion and potential reloads on IPv...

CVE-2020-3179

CVE-2020-3179 affects Cisco Firepower Threat Defense (FTD) Software, specifically the GRE tunnel decapsulation path. The root cause is a memory handling error when processing GRE over IPv6 traffic, which can be triggered by crafted GRE over IPv6 packets (IPv4 or IPv6 payload) to cause a device cr...

CVE-2021-34790

CVE-2021-34790 describes multiple vulnerabilities in the Application Level Gateway (ALG) for the NAT feature in Cisco ASA and Firepower Threat Defense (FTD) software that could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections to hosts behind the ALG. A...

CVE-2021-34794

CVE-2021-34794 affects Cisco ASA/FTD SNMPv3 access control. An attacker could query SNMP data from a device if not permitted by the SNMPv3 ACL, due to ineffective access control. The exploit requires valid SNMP credentials, enabling data retrieval without broader compromise. Cisco has released so...

CVE-2023-20267

CVE-2023-20267 affects Snort 3’s IP geolocation rules where misparsing the configuration can let an unauthenticated, remote attacker spoof an IP to bypass location-based IP restrictions. The issue stems from how IP geolocation rules are parsed. A successful exploit could bypass restrictions witho...

CVE-2024-20342

CVE-2024-20342 : Multiple Cisco products with Snort rate-filtering can be bypassed due to an incorrect connection count comparison. An unauthenticated, remote attacker can send traffic at or above the configured rate to bypass the rate-limiting filter, potentially allowing unintended traffic into...

CVE-2017-3806

CVE-2017-3806 affects Cisco Firepower 4100 Series NGFW and Cisco Firepower 9300 Security Appliance. Description: an authenticated, local attacker can exploit vulnerable CLI command processing due to insufficient input validation to inject arbitrary shell commands executed by the device. Impact: l...

CVE-2018-0297

The CVE-2018-0297 issue affects Cisco Firepower Threat Defense (FTD) software in its detection engine. It arises from incorrect handling of TCP SSL packets received out of order, enabling an unauthenticated, remote attacker to bypass a configured SSL Access Control (AC) policy and block SSL traff...

CVE-2020-3317

Cisco Firepower Threat Defense (FTD) SSL Input Validation (CVE-2020-3317) is caused by insufficient input validation in the ssl_inspection component, leading to denial of service by crashing Snort instances when processing a malformed TLS packet through an ASA. Affected product: Cisco FTD softwar...

CVE-2021-34754

Cisco Firepower Threat Defense (FTD) Software is affected by multiple ENIP payload-inspection vulnerabilities that allow an unauthenticated attacker to bypass configured access control and intrusion policies by sending specially crafted ENIP packets. The root cause is incomplete deep packet inspe...

CVE-2021-40125

CVE-2021-40125 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) IKEv2 implementations. The root cause is improper resource control that enables an authenticated attacker, who can spoof a trusted IKEv2 VPN peer and has valid IKEv2 credentials, to send malformed, authenticated IKEv2 messa...

CVE-2019-12676

CVE-2019-12676 affects Cisco ASA/FTD OSPF LSA processing. An unauthenticated adjacent attacker can send crafted OSPF LSA type 11 packets to trigger a device reload, causing DoS for routed traffic. Root cause: improper parsing of OSPF LSA type 11 options in ASA/FTD software. Impact: reload of the ...

CVE-2019-12699

CVE-2019-12699 concerns Cisco FXOS Software and Firepower Threat Defense (FTD) CLI command injection vulnerabilities due to insufficient input validation. An authenticated, local attacker could exploit crafted arguments to specific CLI commands to execute arbitrary OS commands with root privilege...

CVE-2019-1669

The CVE-2019-1669 issue affects Cisco Firepower Threat Defense (FTD) Software, specifically the data acquisition (DAQ) component. It describes an unauthenticated remote attacker who can bypass configured access control policies or cause a DoS by exploiting improper memory management during traffi...

CVE-2020-3191

The CVE-2020-3191 issue affects Cisco ASA (Adaptive Security Appliance) and Cisco FTD (Firepower Threat Defense) software and is caused by improper length validation in fields of IPv6 DNS packets. The vulnerability allows an unauthenticated, remote attacker to trigger a device reload via a crafte...

CVE-2020-3334

CVE-2020-3334 affects Cisco ASA and Firepower Threat Defense (FTD) running on Cisco Firepower 2100 Series. The issue is an ARP packet processing flaw on the management interface due to incorrect ARP data handling, which could allow an unauthenticated, adjacent attacker to send a burst of unicast ...

CVE-2024-20493

CVE-2024-20493 affects Cisco ASA (Adaptive Security Appliance) and Cisco FTD (Firepower Threat Defense) during the Remote Access SSL VPN authentication phase. The vulnerability stems from ineffective handling of memory resources in the authentication process, which can be triggered by crafted pac...

CVE-2018-0453

Cisco Firepower Management Center and Firepower System Software (FTD sensors) are affected by CVE-2018-0453. The issue stems from insufficient validation of CLI commands sent via the Sourcefire tunnel control channel, allowing an authenticated, local attacker with root privileges on at least one ...

CVE-2020-3195

CVE-2020-3195 affects Cisco ASA and Firepower Threat Defense (FTD) software, via memory-leak in OSPF packet processing. An unauthenticated, remote attacker can send crafted OSPF packets to exhaust memory, potentially causing device reloads and DoS. Cisco advisories (Cisco-SA-ASA-FTD-OSPF-MEMLEAK-...

CVE-2020-3549

The CVE-2020-3549 entry is backed by several connected documents describing a sftunnel MITM issue in Cisco Firepower FMC/FTD. The flaw arises from insufficient sftunnel negotiation protection during initial device registration, allowing an unauthenticated attacker in a man-in-the-middle position ...

CVE-2021-34762

Cisco Firepower Management Center (FMC) Software is affected by CVE-2021-34762, a directory-traversal vulnerability in the web-based management interface caused by insufficient input validation of HTTPS URLs. An authenticated, remote attacker with valid credentials can send crafted HTTPS requests...

CVE-2022-20949

CVE-2022-20949 describes a privilege-escalation flaw in the management web server of Cisco Firepower Threat Defense (FTD) Software. An authenticated, remote attacker with high privileges could issue configuration commands on the affected system due to improper access control of HTTPS endpoints, w...

CVE-2026-20006

CVE-2026-20006 concerns Cisco Secure Firewall Threat Defense software. It reports a vulnerability in the TLS cryptography functionality of Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Engine to restart, resulting in a denial of service. The is...

CVE-2019-12627

CVE-2019-12627 is a Cisco Firepower Threat Defense (FTD) Software information-disclosure vulnerability caused by insufficient application identification in the application policy configuration. An unauthenticated, remote attacker could gain unauthorized read access to sensitive data by sending cr...

CVE-2019-1696

Cisco Firepower Threat Defense (FTD) software is affected by CVE-2019-1696 through multiple DoS vulnerabilities in the SMB Protocol preprocessor detection engine. An unauthenticated, adjacent or remote attacker could cause a denial of service. Affected products are FTD with SMB preprocessor detec...

CVE-2021-34787

Cisco ASA/FTD IDFW rule-bypass (CVE-2021-34787) affects Identity-Based Rule Processing in ASA Software and FTD. Affected devices that use object group search may mishandle certain network requests, allowing an unauthenticated remote attacker to bypass ACLs and security protections, potentially se...

CVE-2024-20297

CVE-2024-20297 affects Cisco ASA and Firepower Threat Defense (FTD) via a logic error in populating group ACLs when an AnyConnect client starts a new session. This could allow an unauthenticated, remote attacker to bypass ACL rules and permit traffic that should be denied on the affected device. ...

CVE-2024-20330

CVE-2024-20330 affects Cisco Firepower Threat Defense (FTD) Software on Cisco Firepower 2100 Series Appliances, impacting the Snort TCP/UDP detection engine. The vulnerability arises from improper memory management in the Snort detection engine, allowing unauthenticated remote attackers to trigge...