CVE-2019-12673

CVE-2019-12673 is a DoS vulnerability in the FTP inspection engine of Cisco ASA/FTD software caused by insufficient validation of FTP data. An unauthenticated, remote attacker can send crafted FTP traffic through an affected device to disrupt responsiveness. Cisco and related advisories confirm t...

CVE-2019-1708

CVE-2019-1708 affects Cisco ASA and Cisco FTD, where MOBIKE processing vulnerability can cause unauthenticated remote attackers to trigger memory leak or device reload, leading to DoS. Root cause: incorrect handling of certain MOBIKE packets. Impact: memory exhaustion and potential reloads on IPv...

CVE-2020-3253

Cisco Firepower Threat Defense (FTD) Software contains a shell access vulnerability in the support tunnel feature. An authenticated, local attacker can enable the support tunnel, set a key, and derive the tunnel password to execute arbitrary commands with root privileges, even when expert mode is...

CVE-2020-3549

The CVE-2020-3549 entry is backed by several connected documents describing a sftunnel MITM issue in Cisco Firepower FMC/FTD. The flaw arises from insufficient sftunnel negotiation protection during initial device registration, allowing an unauthenticated attacker in a man-in-the-middle position ...

CVE-2021-34762

Cisco Firepower Management Center (FMC) Software is affected by CVE-2021-34762, a directory-traversal vulnerability in the web-based management interface caused by insufficient input validation of HTTPS URLs. An authenticated, remote attacker with valid credentials can send crafted HTTPS requests...

CVE-2024-20331

The CVE-2024-20331 entry describes a denial-of-service scenario in the Cisco ASA VPN and Firepower Threat Defense (FTD) Remote Access SSL VPN session authentication. Root cause: insufficient entropy in the authentication process, enabling an unauthenticated, remote attacker to determine an authen...

CVE-2024-20485

Cisco ASA/FTD VPN web server vulnerability (CVE-2024-20485) allows an authenticated, local attacker to execute arbitrary code with root privileges after a next device reload. Root cause: improper validation of a file read from system flash memory; attacker can trigger via restoring a crafted back...

CVE-2019-1669

The CVE-2019-1669 issue affects Cisco Firepower Threat Defense (FTD) Software, specifically the data acquisition (DAQ) component. It describes an unauthenticated remote attacker who can bypass configured access control policies or cause a DoS by exploiting improper memory management during traffi...

CVE-2019-1701

Cisco CVE-2019-1701 covers multiple WebVPN XSS vulnerabilities in Cisco ASA and Firepower Threat Defense (FTD). Affected component: WebVPN portal; root cause: insufficient input validation allowing crafted links to execute arbitrary script in the user’s browser. Prerequisites: attacker must have ...

CVE-2020-3298

CVE-2020-3298 affects Cisco ASA and Firepower Threat Defense (FTD) across ASA/FTD OSBF processing. The root cause is improper memory protection while handling certain OSPF packets, enabling an unauthenticated remote attacker to trigger a device reload and cause a DoS for traffic passing through t...

CVE-2021-34754

Cisco Firepower Threat Defense (FTD) Software is affected by multiple ENIP payload-inspection vulnerabilities that allow an unauthenticated attacker to bypass configured access control and intrusion policies by sending specially crafted ENIP packets. The root cause is incomplete deep packet inspe...

CVE-2022-20949

CVE-2022-20949 describes a privilege-escalation flaw in the management web server of Cisco Firepower Threat Defense (FTD) Software. An authenticated, remote attacker with high privileges could issue configuration commands on the affected system due to improper access control of HTTPS endpoints, w...

CVE-2024-20431

Cisco Firepower Threat Defense (FTD) contains a geolocation data handling flaw that can allow an unauthenticated, remote attacker to bypass geolocation-based access control and send traffic to a protected device. The issue stems from improper assignment of geolocation data within the geolocation ...

CVE-2026-20070

CVE-2026-20070 describes a cross-site scripting (XSS) vulnerability in the VPN web services component of Cisco Secure Firewall ASA/FTD software. The issue stems from improper validation of user-supplied input in HTTP requests, enabling an unauthenticated, remote attacker to induce a browser to ex...

CVE-2019-12674

CVE-2019-12674 refers to Cisco Firepower Threat Defense (FTD) Software multi-instance container escape vulnerabilities. The root cause is insufficient protections on the underlying filesystem, allowing an authenticated, local attacker to modify critical files and escape their FTD container to exe...

CVE-2020-3308

Cisco Firepower Threat Defense (FTD) Software is vulnerable in its Image Signature Verification feature. The root cause is improper verification of digital signatures for patch images, enabling an authenticated, remote attacker with administrator-level credentials to craft and load an unsigned pa...

CVE-2021-1448

Cisco Firepower Threat Defense Software is affected by a command-injection vulnerability in the CLI that, in multi-instance mode, could allow an authenticated local attacker to run arbitrary commands with root privileges due to insufficient validation of user-supplied command arguments. The issue...

CVE-2024-20384

CVE-2024-20384 affects Cisco ASA (Software) and Cisco FTD, where a logic error in the Network Service Group (NSG) ACL population could let an unauthenticated, remote attacker bypass ACLs and permit traffic that should be denied. The issue arises when NSG ACLs are populated on the device, enabling...

CVE-2018-0297

The CVE-2018-0297 issue affects Cisco Firepower Threat Defense (FTD) software in its detection engine. It arises from incorrect handling of TCP SSL packets received out of order, enabling an unauthenticated, remote attacker to bypass a configured SSL Access Control (AC) policy and block SSL traff...

CVE-2017-3887

CVE-2017-3887 concerns Cisco Firepower System Software’s SSL packet handling in the detection engine when configured with an SSL Decrypt-Resign policy. An unauthenticated, remote attacker could trigger a DoS by causing the Snort process to restart, degrading or bypassing traffic inspection. Affec...

CVE-2018-0243

Cisco Firepower System Software contains a vulnerability in its detection engine that can let an unauthenticated attacker bypass a file action policy intended to drop SMB2/SMB3 traffic. Root cause: incorrect detection of SMB2/SMB3 files based on total file length, allowing malicious files to pass...

CVE-2019-12694

Cisco Firepower Threat Defense (FTD) Software has a local command-injection vulnerability in the CLI. An authenticated, local attacker with administrative privileges can exploit insufficient input validation to execute commands on the underlying OS with root privileges. The issue affects multiple...

CVE-2019-1694

CVE-2019-1694 affects Cisco ASA/FTD TCP processing engine. The issue arises from improper handling of TCP traffic, where sending a specific sequence of packets at a high rate can cause the device to reboot, temporarily disrupting traffic (DoS). Affected products include ASA/FTD software; exploita...

CVE-2019-1696

Cisco Firepower Threat Defense (FTD) software is affected by CVE-2019-1696 through multiple DoS vulnerabilities in the SMB Protocol preprocessor detection engine. An unauthenticated, adjacent or remote attacker could cause a denial of service. Affected products are FTD with SMB preprocessor detec...

CVE-2020-3285

Cisco Firepower Threat Defense Software TLS 1.3 URL category bypass vulnerability (CVE-2020-3285) arises from a Snort handling logic error. An unauthenticated, remote attacker could bypass the TLS 1.3 policy to access URLs that should be dropped. Affected product: FTD software with TLS policy URL...

CVE-2020-3303

The CVE-2020-3303 issue affects Cisco ASA (Adaptive Security Appliance) and Cisco FTD (Firepower Threat Defense) software, arising from improper memory management in the IKEv1 feature. An unauthenticated, remote attacker can send crafted IKEv1 traffic to trigger a denial-of-service on affected de...

CVE-2020-3562

Cisco Firepower 2100 Series devices running Firepower Threat Defense (FTD) are affected by CVE-2020-3562, a denial-of-service vulnerability in the SSL/TLS inspection component. The flaw arises from improper input validation of certain fields in specific SSL/TLS messages, allowing an unauthenticat...

CVE-2021-34763

Cisco Firepower Management Center (FMC) Web UI vulnerabilities CVE-2021-34763: two issues—an authenticated attacker can lure a user to click a crafted link to execute arbitrary script code (XSS) and an unauthenticated attacker can exploit improper input validation to trigger an open redirect. The...

CVE-2019-12675

Cisco Firepower Threat Defense (FTD) Software contains multiple vulnerabilities in the multi-instance container feature that could allow an authenticated, local attacker to escape the attacker’s FTD container and execute commands with root privileges in the host namespace . The root cause is insu...

CVE-2021-1476

CVE-2021-1476 affects Cisco ASA/FTD CLI, where insufficient input validation in command handling allows an authenticated local attacker with admin credentials to execute arbitrary commands on the device OS with root privileges. Affected products are Cisco ASA and Firepower Threat Defense software...

CVE-2021-34756

Cisco Firepower Threat Defense (FTD) Software contains CLI command injection vulnerabilities that allow an authenticated, local attacker to execute arbitrary commands with root privileges due to insufficient validation of user-provided command arguments. Affected component is the FTD CLI; impact ...

CVE-2024-20341

Summary: CVE-2024-20341 targets Cisco ASA/FTD VPN Web Client Services. A vulnerability in input validation allows an unauthenticated, remote attacker to trigger cross-site scripting (XSS) in a browser accessing the affected device. The attacker persuades a user to click a crafted link, enabling e...

CVE-2026-20008

Cisco reports a CVE-2026-20008 affecting a small subset of CLI commands on Cisco Secure Firewall ASA and Threat Defense (FTD) software. The vulnerability arises from unsanitized user input that can be used to craft Lua code executed on the underlying OS as root. An authenticated attacker with Adm...

CVE-2018-0254

Cisco Firepower System Software’s detection engine is affected by CVE-2018-0254. The issue arises when Intelligent Application Bypass (IAB) with a drop percentage threshold is configured, causing incorrect counting of dropped traffic. An unauthenticated, remote attacker could exploit this to bypa...

CVE-2026-20102

Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense (FTD) are affected by CVE-2026-20102, a reflected XSS in the SAML 2.0 SSO feature caused by insufficient input validation of multiple HTTP parameters. An unauthenticated, remote attacker could lure a user to a malicious link to ex...

CVE-2018-15390

CVE-2018-15390 describes a denial-of-service vulnerability in the Cisco Firepower Threat Defense (FTD) FTP inspection engine. An unauthenticated, remote attacker can send a high volume of transit traffic to trigger a low-memory condition, causing the engine to fail to release spinlocks when FTP i...

CVE-2025-20127

CVE-2025-20127 affects Cisco Secure Firewall ASA/FTD on Firepower 3100 and 4200 Series. The issue stems from TLS 1.3 cipher TLS_CHACHA20_POLY1305_SHA256, allowing an authenticated, remote attacker to exhaust resources tied to incoming TLS 1.3 connections and potentially deny new SSL/TLS or VPN co...

CVE-2019-1970

CVE-2019-1970 affects Cisco Firepower Threat Defense (FTD) Software: the SSL/TLS protocol inspection engine contains errors when handling specific SSL/TLS messages, allowing an unauthenticated, remote attacker to bypass configured file policies by sending crafted HTTP packets and potentially deli...

CVE-2019-1980

CVE-2019-1980 affects Cisco Firepower Threat Defense Software (FTD), Cisco FirePOWER Services for ASA, and Cisco Firepower Management Center. Root cause: improper detection of the initial use of a protocol on a nonstandard port in the protocol inspection component, enabling an unauthenticated, re...

CVE-2020-3577

Cisco Firepower Threat Defense (FTD) software, specifically interfaces configured as Inline Pair or in Passive mode, is affected by a DoS in the ingress packet processing path due to insufficient validation of Ethernet frames. An unauthenticated adjacent attacker can trigger either a device login...

CVE-2024-20351

CVE-2024-20351 describes a Denial of Service vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine used by Cisco Firepower Threat Defense (FTD) software and Cisco FirePOWER Services. An unauthenticated, remote attacker can trigger high traffic volume to cause legitim...

CVE-2024-20382

The CVE-2024-20382 issue affects Cisco ASA/FTD VPN Web Client Services. It arises from improper validation of user-supplied input to application endpoints, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack in the browser of a user visiting the affected de...

CVE-2019-1697

CVE-2019-1697 describes a denial-of-service vulnerability in Cisco ASA/FTD LDAP handling. An unauthenticated remote attacker can send crafted LDAP BER packets that are parsed by the device, causing it to reload. Root cause: improper parsing of LDAP packets. Affected: Cisco ASA Software and Firepo...

CVE-2026-20013

CVE-2026-20013 describes a DoS in Cisco Secure Firewall ASA/FTD products due to memory exhaustion during IKEv2 packet processing. The vulnerability stems from not freeing memory while handling IKEv2 traffic, which an unauthenticated remote attacker can trigger by sending crafted IKEv2 packets, po...

CVE-2021-34761

CVE-2021-34761 affects Cisco Firepower Threat Defense (FTD) Software. The issue stems from incomplete validation of user input for a specific CLI command, enabling an authenticated local attacker (with administrative credentials) to overwrite or append arbitrary data to system files with root-lev...

CVE-2018-15462

CVE-2018-15462 affects Cisco Firepower Threat Defense (FTD) Software. The issue is in the TCP ingress handler for data interfaces configured with management access, caused by insufficient ingress TCP rate limiting. An unauthenticated, remote attacker can send a steady stream of TCP traffic to por...

CVE-2024-20339

The CVE-2024-20339 entry concerns Cisco Firepower Threat Defense (FTD) for the 2100 Series. The vulnerability resides in the TLS processing path and can be exploited by unauthenticated, remote attackers sending specific TLS traffic over IPv4, potentially causing the affected device to reload and ...

CVE-2019-1704

CVE-2019-1704 describes multiple vulnerabilities in the Cisco Firepower Threat Defense (FTD) Software’s SMB Protocol Preprocessor Detection Engine. The flaws could allow an unauthenticated, adjacent, or remote attacker to cause a denial of service (DoS) in FTD through the SMB preprocessor compone...

CVE-2026-20014

The CVE concerns Cisco Secure Firewall ASA Software and Cisco Secure FTD Software with an IKEv2 handling flaw. An authenticated remote attacker with valid VPN user credentials can send crafted IKEv2 packets to trigger a DoS by exhausting memory, leading to a device reload and potential impact on ...

CVE-2026-20054

Cisco CVE-2026-20054 affects Snort 3 VBA feature. The vulnerability stems from improper error checking when decompressing VBA data, allowing an unauthenticated attacker to send crafted VBA to the Snort 3 Detection Engine and force an infinite loop, resulting in DoS. CVSS‑3.1 metrics: AV:N/AC:L/PR...