CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2022-20685

CVE-2022-20685 is a DoS vulnerability in the Snort Modbus preprocessor caused by an integer overflow when processing Modbus traffic. An unauthenticated, remote attacker could craft traffic to cause the Snort process to hang and halt traffic inspection. Cisco has released software updates addressi...

CVE-2020-3580

Cisco ASA/FTD web services suffer XSS due to insufficient input validation in the web UI, allowing unauthenticated, remote attackers to induce script execution or access browser data via crafted links. Affected products include Cisco ASA and FTD with specific AnyConnect/WebVPN configurations. Imp...

CVE-2023-20269

Cisco ASA/FTD remote access VPN vulnerability CVE-2023-20269 allows an unauthenticated, remote attacker to perform brute force against credentials or, for older releases (

CVE-2024-20359

CVE-2024-20359 affects Cisco ASA and Cisco FTD. A legacy capability flaw allows an authenticated local attacker to exploit improper validation of a file read from flash memory by copying a crafted file to disk0:, enabling arbitrary code execution with root privileges after the next device reload....

CVE-2024-20353

CVE-2024-20353 affects Cisco ASA/FTD Web Services. The vulnerability stems from incomplete error checking when parsing HTTP headers, allowing an unauthenticated remote attacker to trigger a reload and cause a DoS. Exploitation is referenced by multiple sources, including CISA’s Known Exploited Vu...

CVE-2022-20759

Cisco ASA and Firepower Threat Defense (FTD) web services interface for remote access VPN features contains a privilege-escalation flaw due to improper separation of authentication and authorization scopes. An authenticated but unprivileged remote attacker can send crafted HTTPS requests to the w...

CVE-2023-20275

CVE-2023-20275 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software, specifically the AnyConnect SSL VPN feature. The root cause is improper validation of the inner source IP address after decryption, allowing an authenticated, remote attacker to send packets that appear t...

CVE-2024-20481

The CVE-2024-20481 entry concerns Cisco ASA/FTD Remote Access VPN (RAVPN) DoS from resource exhaustion. Affected components: ASA and FTD software; vulnerability arises when an unauthenticated, remote attacker sends a flood of VPN authentication requests, exhausting device resources and potentiall...

CVE-2022-20715

The CVE-2022-20715 issue affects Cisco ASA and Cisco FTD remote access SSL VPN. Affected components are the remote access VPN error handling related to client connections; improper validation of errors could allow an unauthenticated, remote attacker to trigger a restart and DoS by sending crafted...

CVE-2022-20757

Cisco Firepower Threat Defense (FTD) Software contains a DoS vulnerability where a high-rate UDP flood exploits improper traffic handling once platform limits are reached, causing all new connections to be dropped. This is an unauthenticated, remote attack described in multiple sources (Cisco adv...

CVE-2024-20407

Cisco Firepower Threat Defense (FTD) Software contains a vulnerability in the interaction between the TCP Intercept feature and Snort 3 detection engine that could allow an unauthenticated, remote attacker to bypass configured policies and inject unintended traffic through an affected device. The...

CVE-2022-20927

CVE-2022-20927 affects Cisco ASA and Cisco FTD SSL/TLS client software. The issue stems from improper memory management when the device initiates SSL/TLS connections, enabling an authenticated, remote attacker to provoke an unexpected reload and DoS by ensuring the device connects to an SSL/TLS s...

CVE-2021-40114

CVE-2021-40114 affects multiple Cisco products via the Snort detection engine’s ICMP processing, causing DoS from improper memory/resource management when handling ICMP packets. Root cause: memory/resource management flaw in ICMP packet processing. Impact: unauthenticated remote DoS, potentially ...

CVE-2022-20729

Cisco Firepower Threat Defense (FTD) Software CLI is affected by an XML injection vulnerability due to insufficient input validation in the command parser. An authenticated, local attacker could supply crafted input to inject XML, potentially causing unexpected command processing and output. Cisc...

CVE-2024-20358

Cisco ASA/FTD restore-functionality command-injection vulnerability (CVE-2024-20358) allows an authenticated, local attacker to execute arbitrary root commands by restoring a crafted backup file. Root access is required, with administrator privileges. Cisco has released updates to fix this vulner...

CVE-2023-20095

The CVE-2023-20095 issue affects Cisco ASA and Cisco Firepower Threat Defense (FTD) remote access VPN. The root cause is improper handling of HTTPS requests, allowing an unauthenticated remote attacker to trigger resource exhaustion and a DoS on affected devices. Connected sources confirm this vu...

CVE-2022-20713

CVE-2022-20713 affects Cisco ASA/FTD VPN web client services. Root cause: improper input validation sent to the VPN web client, enabling an unauthenticated user to trigger browser-based attacks (e.g., cross-site scripting) by persuading a user to visit a crafted site. Impact is browser-executable...

CVE-2022-20947

CVE-2022-20947 affects Cisco ASA and Firepower Threat Defense (FTD) software via the Dynamic Access Policies (DAP) feature. The root cause is improper processing of HostScan data from the Posture module, allowing an unauthenticated, remote attacker to cause an affected device to reload and suffer...

CVE-2023-20083

CVE-2023-20083 affects Cisco Firepower Threat Defense (FTD) Software in ICMPv6 inspection when Snort 2 is enabled. The flaw stems from improper error checking while parsing ICMPv6 header fields, allowing an unauthenticated remote attacker to trigger CPU exhaustion (up to 100%) and cause a DoS by ...

CVE-2024-20402

CVE-2024-20402 affects Cisco ASA (SSL VPN) and Cisco FTD (SSL VPN) where a logic error in SSL VPN memory management can be exploited by unauthenticated remote attackers to cause the device to reload, leading to a DoS. Affected components: SSL VPN handling on ASA/FTD software. Root cause: memory-m...

CVE-2021-1493

CVE-2021-1493 targets Cisco ASA/FTD Web Services Buffer Overflow. The issue stems from insufficient boundary checks in the web services interface, allowing an authenticated remote attacker to send a crafted HTTP request to trigger a buffer overflow, which could disclose data fragments or cause a ...

CVE-2023-20086

CVE-2023-20086 affects Cisco ASA and Cisco FTD software, where improper ICMPv6 message processing could let an unauthenticated, remote attacker trigger a DoS by forcing a device reload. This is a network-facing issue (CVSS v3.1: 8.6, HIGH, NO privileges required; CPU/network target), with exploit...

CVE-2021-1504

CVE-2021-1504 affects Cisco ASA and Firepower Threat Defense (FTD) Software. The issue arises from improper input validation of HTTPS requests, allowing an unauthenticated, remote attacker to trigger a device reload and cause a DoS. Exploitation involves sending a crafted HTTPS request to a vulne...

CVE-2021-40117

CVE-2021-40117 affects Cisco ASA and Firepower Threat Defense (FTD) Software. The issue is in the SSL/TLS message handler where incoming packets are not properly processed, allowing an unauthenticated remote attacker to trigger a reload of the device and cause a denial-of-service (DoS). Exploitat...

CVE-2021-1573

Cisco CVE-2021-1573 affects the web services interface of ASA Software and FTD Software. An unauthenticated remote attacker can trigger a DoS by sending crafted HTTPS requests, due to improper input validation when parsing HTTPS requests, causing the device to reload. Affected products: Cisco ASA...

CVE-2021-1445

Cisco ASA/FTD Web Services VPN DoS vulnerabilities stem from improper input validation of HTTPS requests. An unauthenticated, remote attacker can exploit this by sending a crafted HTTPS request to an affected device, potentially causing a reload and a DoS condition. Affected products include Cisc...

CVE-2022-20924

CVE-2022-20924 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) software with SNMP. Root cause is insufficient input validation in the SNMP handling, enabling an authenticated, remote attacker to trigger device reloads and a DoS condition. Affected products include Cisco ASA/FTD; exploi...

CVE-2024-20355

CVE-2024-20355 affects Cisco ASA/FTD SAML SSO. The issue stems from improper separation of authorization domains, allowing an authenticated remote user to reuse a SAML token to access a tunnel group they are not authorized for, enabling a remote VPN session to secured networks behind the device. ...

CVE-2021-34793

CVE-2021-34793 is a DoS vulnerability in Cisco ASA/FTD software (transparent mode) due to improper handling of certain TCP segments by the TCP Normalizer, allowing an unauthenticated remote attacker to poison MAC address tables and disrupt networks. Affected products include Cisco ASA and Cisco F...

CVE-2022-20934

CVE-2022-20934 affects Cisco Firepower Threat Defense (FTD) and Cisco FXOS Software. The issue is a command-injection vulnerability in the CLI caused by insufficient input validation, allowing an authenticated, local attacker with Administrator privileges to inject OS commands and gain root acces...

CVE-2023-20244

CVE-2023-20244 affects Cisco Firepower Threat Defense (FTD) on Cisco Firepower 2100 Series, with vulnerable internal packet processing in the inspection engine. The issue allows an unauthenticated, remote attacker to trigger a DoS by sending crafted packets, potentially depleting all 9,472-byte b...

CVE-2023-20063

Cisco Firepower Threat Defense (FTD) and Cisco Firepower Management Center (FMC) inter-device communication contains a code-injection vulnerability due to insufficient input validation. An authenticated, local attacker who gains admin privileges on an associated device can use expert mode to subm...

CVE-2021-40118

CVE-2021-40118 affects Cisco ASA/FTD web services. The vulnerability arises from improper input validation when parsing HTTPS requests, allowing an unauthenticated, remote attacker to trigger a DoS condition by sending a malicious HTTPS request, potentially causing the device to reload. The issue...

CVE-2022-20946

Cisco Firepower Threat Defense (FTD) Software is affected by CVE-2022-20946, a memory-handling error in GRE tunnel decapsulation that can be exploited by unauthenticated remote attackers to restart the device and cause DoS. The issue affects GRE processing in FTD; exploitation requires sending a ...

CVE-2022-20730

Cisco Firepower Threat Defense (FTD) is affected by CVE-2022-20730, a Security Intelligence DNS feed bypass vulnerability caused by incorrect feed update processing. An unauthenticated, remote attacker could bypass DNS feed protections and send blocked traffic through an affected device, potentia...

CVE-2022-20928

CVE-2022-20928 describes a VPN authorization bypass in Cisco ASA/FTD where a flaw in the VPN authentication flow’s authorization verifications allows an unauthenticated remote attacker (with valid credentials) to establish a VPN session as a different user. The impact is privilege propagation wit...

CVE-2023-20071

Cisco CVE-2023-20071 affects the Snort detection engine’s FTP inspection module across multiple Cisco products (notably FTD/ASA family). An unauthenticated, network-accessible attacker can craft FTP traffic to bypass FTP inspection and potentially deliver a payload, per Cisco’s security advisory ...

CVE-2021-1495

CVE-2021-1495 affects Cisco Snort detection engine used in multiple Cisco products. The flaw arises from incorrect handling of specific HTTP header parameters, enabling an unauthenticated, remote attacker to bypass a configured HTTP File Policy by sending crafted HTTP packets, potentially deliver...

CVE-2021-34781

The CVE-2021-34781 issue affects Cisco Firepower Threat Defense (FTD) Software in multi-Instance deployments, where improper error handling during SSH session establishment allows an unauthenticated, remote attacker to trigger resource exhaustion and a DoS condition. Exploitation involves sending...

CVE-2022-20854

The CVE-2022-20854 issue affects Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software, caused by improper error handling during SSH session establishment. An unauthenticated, remote attacker sending a high rate of crafted SSH connections can exhaust resources, leadi...

CVE-2023-20031

The CVE-2023-20031 issue affects Cisco Firepower Threat Defense (FTD) with Snort 3, where a logic error in SSL/TLS certificate handling during SSL handshake under load can be exploited by a high rate of connection requests to cause the Snort 3 engine to reload. Consequences documented include pot...

CVE-2024-20261

CVE-2024-20261 affects Cisco Firepower Threat Defense (FTD) Software via the file policy feature that inspects encrypted archive files. The issue is a logic error triggered when inspecting a specific class of encrypted archives, allowing an unauthenticated, remote attacker to bypass a configured ...

CVE-2023-20245

CVE-2023-20245 affects Cisco ASA and Cisco FTD where multiple vulnerabilities in the per-user-override feature can allow an unauthenticated, remote attacker to bypass configured ACLs and let denied traffic flow through an affected device. The issues stem from a logic error in how per-user-overrid...

CVE-2024-20268

CVE-2024-20268 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) SNMP feature. The issue is caused by insufficient input validation of SNMP packets, allowing an authenticated, remote attacker to trigger a device reload and cause a DoS. The vulnerability affects all SNMP versions (1/2c/3)...

CVE-2021-1501

CVE-2021-1501 affects Cisco ASA and Firepower Threat Defense (FTD) SIP inspection engine. The root cause is a crash during a SIP pinhole hash lookup, allowing an unauthenticated remote attacker to crash and reload the device, causing a DoS. Cisco provides software updates addressing this vulnerab...

CVE-2021-34783

CVE-2021-34783 affects Cisco ASA and Firepower Threat Defense (FTD) software’s SSL/TLS decryption path. The vulnerability arises from insufficient validation of SSL/TLS messages in the software-based TLS handler, allowing an unauthenticated, remote attacker to force a device reload and cause a Do...

CVE-2022-20940

Cisco Firepower Threat Defense (FTD) Software is affected by a Bleichenbacher-related information disclosure in the TLS handler and SSL decryption policy implementation. The root cause is improper countermeasures against Bleichenbacher attacks, allowing an unauthenticated remote attacker to poten...

CVE-2021-34791

Cisco ASA and Firepower Threat Defense (FTD) software contain multiple ALG/NAT bypass vulnerabilities (NAT Slipstreaming) due to an incorrect implementation of security checks in the ALG/NAT handling, allowing unauthenticated remote actors to bypass the ALG and open unauthorized connections behin...

CVE-2021-34704

CVE-2021-34704 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Web Services. The issue stems from improper input validation when parsing HTTPS requests, allowing an unauthenticated remote attacker to trigger a reload and cause a DoS. Multiple connected sources confirm a DoS vi...