CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2022-20685

CVE-2022-20685 is a DoS vulnerability in the Snort Modbus preprocessor caused by an integer overflow when processing Modbus traffic. An unauthenticated, remote attacker could craft traffic to cause the Snort process to hang and halt traffic inspection. Cisco has released software updates addressi...

CVE-2020-3452

CVE-2020-3452 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) web services. The issue is due to improper input validation of URLs in HTTP requests, enabling unauthenticated, remote attackers to perform directory traversal and read files from the web services filesystem (enable...

CVE-2023-20269

Cisco ASA/FTD remote access VPN vulnerability CVE-2023-20269 allows an unauthenticated, remote attacker to perform brute force against credentials or, for older releases (

CVE-2024-20359

CVE-2024-20359 affects Cisco ASA and Cisco FTD. A legacy capability flaw allows an authenticated local attacker to exploit improper validation of a file read from flash memory by copying a crafted file to disk0:, enabling arbitrary code execution with root privileges after the next device reload....

CVE-2024-20353

CVE-2024-20353 affects Cisco ASA/FTD Web Services. The vulnerability stems from incomplete error checking when parsing HTTP headers, allowing an unauthenticated remote attacker to trigger a reload and cause a DoS. Exploitation is referenced by multiple sources, including CISA’s Known Exploited Vu...

CVE-2020-3187

Cisco ASA/FTD web services interface (Cisco ASA Software and Cisco Firepower Threat Defense) is vulnerable to CVE-2020-3187 via directory traversal. The authenticated or unauthenticated attacker can craft HTTP requests (e.g., to /+CSCOE+/session_password.html) to view and delete files within the ...

CVE-2020-3259

CVE-2020-3259 is Cisco ASA/FTD Web Services Information Disclosure: an unauthenticated attacker could retrieve memory contents via crafted GET requests due to a buffer-tracking issue, with impact limited to specific AnyConnect/WebVPN configurations. Cisco and CVE listings confirm information disc...

CVE-2026-20012

The CVE-2026-20012 entry describes a memory-leak DoS in the IKEv2 handling of Cisco IOS, IOS XE, ASA, and FTDS (Threat Defense). Root cause: improper parsing of IKEv2 packets leading to conditions where devices reload (IOS/IOS XE) or exhaust memory to the point of instability (ASA/FTD). Affected ...

CVE-2023-20275

CVE-2023-20275 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software, specifically the AnyConnect SSL VPN feature. The root cause is improper validation of the inner source IP address after decryption, allowing an authenticated, remote attacker to send packets that appear t...

CVE-2024-20481

The CVE-2024-20481 entry concerns Cisco ASA/FTD Remote Access VPN (RAVPN) DoS from resource exhaustion. Affected components: ASA and FTD software; vulnerability arises when an unauthenticated, remote attacker sends a flood of VPN authentication requests, exhausting device resources and potentiall...

CVE-2026-20039

CVE-2026-20039 affects Cisco Secure Firewall ASA/FTD VPN web server. The root cause is ineffective memory management in the VPN web server, which can be exploited by sending a large flood of crafted HTTP requests, potentially causing the device to reload and suffer a denial-of-service. The affect...

CVE-2024-20407

Cisco Firepower Threat Defense (FTD) Software contains a vulnerability in the interaction between the TCP Intercept feature and Snort 3 detection engine that could allow an unauthenticated, remote attacker to bypass configured policies and inject unintended traffic through an affected device. The...

CVE-2023-20095

The CVE-2023-20095 issue affects Cisco ASA and Cisco Firepower Threat Defense (FTD) remote access VPN. The root cause is improper handling of HTTPS requests, allowing an unauthenticated remote attacker to trigger resource exhaustion and a DoS on affected devices. Connected sources confirm this vu...

CVE-2022-20713

CVE-2022-20713 affects Cisco ASA/FTD VPN web client services. Root cause: improper input validation sent to the VPN web client, enabling an unauthenticated user to trigger browser-based attacks (e.g., cross-site scripting) by persuading a user to visit a crafted site. Impact is browser-executable...

CVE-2024-20358

Cisco ASA/FTD restore-functionality command-injection vulnerability (CVE-2024-20358) allows an authenticated, local attacker to execute arbitrary root commands by restoring a crafted backup file. Root access is required, with administrator privileges. Cisco has released updates to fix this vulner...

CVE-2020-3578

CVE-2020-3578 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) web services interface. The issue is an insufficient validation of URLs in portal access rules, enabling an unauthenticated, remote attacker to bypass a configured access rule and reach parts of the WebVPN portal that should...

CVE-2020-3529

The CVE-2020-3529 issue affects Cisco ** ASA** and FTD software. It is a vulnerability in the SSL VPN negotiation process caused by inefficient direct memory access (DMA) memory management during SSL VPN negotiation. An unauthenticated, remote attacker could send a steady stream of crafted DTLS t...

CVE-2022-20947

CVE-2022-20947 affects Cisco ASA and Firepower Threat Defense (FTD) software via the Dynamic Access Policies (DAP) feature. The root cause is improper processing of HostScan data from the Posture module, allowing an unauthenticated, remote attacker to cause an affected device to reload and suffer...

CVE-2026-20007

The CVE-2026-20007 issue affects Cisco Secure Firewall Threat Defense (FTD) Software with Snort 2/3 deep packet inspection. A logic error in the integration of Snort Engine rules can cause different Snort rules to be hit during deep inspection of inner and outer connections, enabling an unauthent...

CVE-2020-3563

CVE-2020-3563 affects Cisco Firepower Threat Defense (FTD) Software. The vulnerability stems from inefficient memory management in the packet-processing path, enabling an unauthenticated, remote attacker to perform a TCP flood by sending many TCP packets to a specific port. This can exhaust syste...

CVE-2023-20083

CVE-2023-20083 affects Cisco Firepower Threat Defense (FTD) Software in ICMPv6 inspection when Snort 2 is enabled. The flaw stems from improper error checking while parsing ICMPv6 header fields, allowing an unauthenticated remote attacker to trigger CPU exhaustion (up to 100%) and cause a DoS by ...

CVE-2020-3582

CVE-2020-3582 involves multiple XSS vulnerabilities in the web services interface of Cisco ASA and Firepower Threat Defense (FTD) software. The root cause is insufficient validation of user-supplied input in the device’s web interface, allowing an unauthenticated, remote attacker to persuade a us...

CVE-2024-20402

CVE-2024-20402 affects Cisco ASA (SSL VPN) and Cisco FTD (SSL VPN) where a logic error in SSL VPN memory management can be exploited by unauthenticated remote attackers to cause the device to reload, leading to a DoS. Affected components: SSL VPN handling on ASA/FTD software. Root cause: memory-m...

CVE-2020-3572

CVE-2020-3572 is a memory-leak DoS in the SSL/TLS session handler of Cisco ASA and Firepower Threat Defense (FTD) software. The root cause is a memory leak when closing SSL/TLS connections in a specific state; an unauthenticated, remote attacker can exhaust device memory by creating and closing m...

CVE-2020-3528

CVE-2020-3528 describes a DoS vulnerability in the OSPFv2 implementation of Cisco ASA and Firepower Threat Defense (FTD) software. The issue arises from incomplete input validation when processing certain OSPFv2 packets with Link-Local Signaling (LLS) data, which could allow an unauthenticated, r...

CVE-2023-20086

CVE-2023-20086 affects Cisco ASA and Cisco FTD software, where improper ICMPv6 message processing could let an unauthenticated, remote attacker trigger a DoS by forcing a device reload. This is a network-facing issue (CVSS v3.1: 8.6, HIGH, NO privileges required; CPU/network target), with exploit...

CVE-2025-20182

The CVE-2025-20182 entry describes a DoS vulnerability in IKEv2 message processing affecting Cisco ASA, FTD, IOS, and IOS XE. The root cause is insufficient input validation when handling IKEv2 traffic, which could allow an unauthenticated remote attacker to force a device reload and thus a DoS c...

CVE-2020-3254

The CVE-2020-3254 issue affects Cisco ASA and Firepower Threat Defense (FTD) software, specifically the Media Gateway Control Protocol (MGCP) inspection feature. The vulnerability arises from inefficient memory management in MGCP inspection, allowing an unauthenticated, remote attacker to send cr...

CVE-2020-3304

CVE-2020-3304 affects Cisco ASA and Firepower Threat Defense (FTD) web interfaces. The issue stems from improper HTTP input validation, allowing an unauthenticated, remote attacker to craft an HTTP request that can trigger a reload of the affected device, causing a DoS. Impact is limited to the w...

CVE-2020-3581

CVE-2020-3581 covers multiple cross-site scripting (XSS) vulnerabilities in the web services interface of Cisco ASA and FTD software. The flaws arise from insufficient validation of user-supplied input in the web services interface, allowing an unauthenticated, remote attacker to persuade a user ...

CVE-2020-3583

CVE-2020-3583 describes cross-site scripting vulnerabilities in Cisco ASA/FTD Web Services interface due to insufficient validation of user input. A remote, unauthenticated attacker could entice a user to click a crafted link to execute arbitrary script in the interface context or access browser-...

CVE-2020-3352

CVE-2020-3352 affects Cisco Firepower Threat Defense (FTD) Software CLI, where undocumented configuration commands allow an authenticated, local attacker to access hidden commands and modify various device configurations that should not be exposed via CLI. The root cause is exposure of hidden/und...

CVE-2022-20934

CVE-2022-20934 affects Cisco Firepower Threat Defense (FTD) and Cisco FXOS Software. The issue is a command-injection vulnerability in the CLI caused by insufficient input validation, allowing an authenticated, local attacker with Administrator privileges to inject OS commands and gain root acces...

CVE-2024-20355

CVE-2024-20355 affects Cisco ASA/FTD SAML SSO. The issue stems from improper separation of authorization domains, allowing an authenticated remote user to reuse a SAML token to access a tunnel group they are not authorized for, enabling a remote VPN session to secured networks behind the device. ...

CVE-2023-20244

CVE-2023-20244 affects Cisco Firepower Threat Defense (FTD) on Cisco Firepower 2100 Series, with vulnerable internal packet processing in the inspection engine. The issue allows an unauthenticated, remote attacker to trigger a DoS by sending crafted packets, potentially depleting all 9,472-byte b...

CVE-2020-3561

CVE-2020-3561 affects Cisco ASA/FTD WebVPN (Clientless SSL VPN). The issue is a result of improper input sanitization that enables unauthenticated, remote CRLF header injection when a user is lured to click a crafted link, allowing arbitrary HTTP headers to be injected and potential redirection. ...

CVE-2020-3533

The CVE-2020-3533 issue affects Cisco Firepower Threat Defense (FTD) Software, targeting the SNMP input packet processor. Root cause: insufficient memory management protections under heavy SNMP polling loads. Attack scenario: unauthenticated, remote attacker sends a high rate of SNMP requests to ...

CVE-2020-3564

CVE-2020-3564 affects Cisco ASA/FTD FTP inspection engine. Root cause: ineffective flow tracking of FTP traffic allows an unauthenticated, remote attacker to bypass FTP inspection and complete FTP connections. Affected products include Cisco ASA Software and Cisco FTD Software. In practice, explo...

CVE-2023-20063

Cisco Firepower Threat Defense (FTD) and Cisco Firepower Management Center (FMC) inter-device communication contains a code-injection vulnerability due to insufficient input validation. An authenticated, local attacker who gains admin privileges on an associated device can use expert mode to subm...

CVE-2020-3436

The CVE-2020-3436 vulnerability affects Cisco ASA/FTD Web Services: an unauthenticated attacker can upload arbitrarily large files to specific folders, triggering a watchdog timeout and an unexpected device reload (DoS) due to inefficient handling of large file writes. Affected products are Cisco...

CVE-2022-20946

Cisco Firepower Threat Defense (FTD) Software is affected by CVE-2022-20946, a memory-handling error in GRE tunnel decapsulation that can be exploited by unauthenticated remote attackers to restart the device and cause DoS. The issue affects GRE processing in FTD; exploitation requires sending a ...

CVE-2019-12678

The CVE-2019-12678 issue affects Cisco ASA/FTD SIP inspection: an unauthenticated remote attacker can send malicious SIP packets to trigger an integer underflow in the SIP parsing module, causing the device to read unmapped memory and crash. Root cause: improper SIP message parsing in the SIP ins...

CVE-2022-20928

CVE-2022-20928 describes a VPN authorization bypass in Cisco ASA/FTD where a flaw in the VPN authentication flow’s authorization verifications allows an unauthenticated remote attacker (with valid credentials) to establish a VPN session as a different user. The impact is privilege propagation wit...

CVE-2019-12698

Cisco ASA Software and Cisco FTD WebVPN CPU Denial of Service (CVE-2019-12698) allows unauthenticated remote attackers to trigger high CPU by repeated WebVPN HTTP page requests, causing DoS. Affected ASA/FTD versions are mitigated by Cisco software updates; there are no supported workarounds per ...

CVE-2022-20854

The CVE-2022-20854 issue affects Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software, caused by improper error handling during SSH session establishment. An unauthenticated, remote attacker sending a high rate of crafted SSH connections can exhaust resources, leadi...

CVE-2023-20245

CVE-2023-20245 affects Cisco ASA and Cisco FTD where multiple vulnerabilities in the per-user-override feature can allow an unauthenticated, remote attacker to bypass configured ACLs and let denied traffic flow through an affected device. The issues stem from a logic error in how per-user-overrid...

CVE-2020-3186

The CVE-2020-3186 entry concerns Cisco Firepower Threat Defense (FTD) Software where the management interface access lists can be misconfigured so that ports allowed in one list are denied in another. This permits an unauthenticated, remote attacker to bypass the management ACLs by sending crafte...

CVE-2020-3305

The CVE-2020-3305 issue affects Cisco ASA and Firepower Threat Defense (FTD) where the BGP module incorrectly processes certain BGP packets. An unauthenticated, remote attacker can craft BGP traffic to trigger a denial of service on the affected device. Multiple connected documents corroborate a ...

CVE-2024-20261

CVE-2024-20261 affects Cisco Firepower Threat Defense (FTD) Software via the file policy feature that inspects encrypted archive files. The issue is a logic error triggered when inspecting a specific class of encrypted archives, allowing an unauthenticated, remote attacker to bypass a configured ...