CVE-2023-20269

Cisco ASA/FTD remote access VPN vulnerability CVE-2023-20269 allows an unauthenticated, remote attacker to perform brute force against credentials or, for older releases (

CVE-2024-20359

CVE-2024-20359 affects Cisco ASA and Cisco FTD. A legacy capability flaw allows an authenticated local attacker to exploit improper validation of a file read from flash memory by copying a crafted file to disk0:, enabling arbitrary code execution with root privileges after the next device reload....

CVE-2024-20353

CVE-2024-20353 affects Cisco ASA/FTD Web Services. The vulnerability stems from incomplete error checking when parsing HTTP headers, allowing an unauthenticated remote attacker to trigger a reload and cause a DoS. Exploitation is referenced by multiple sources, including CISA’s Known Exploited Vu...

CVE-2023-20275

CVE-2023-20275 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software, specifically the AnyConnect SSL VPN feature. The root cause is improper validation of the inner source IP address after decryption, allowing an authenticated, remote attacker to send packets that appear t...

CVE-2024-20481

The CVE-2024-20481 entry concerns Cisco ASA/FTD Remote Access VPN (RAVPN) DoS from resource exhaustion. Affected components: ASA and FTD software; vulnerability arises when an unauthenticated, remote attacker sends a flood of VPN authentication requests, exhausting device resources and potentiall...

CVE-2024-20407

Cisco Firepower Threat Defense (FTD) Software contains a vulnerability in the interaction between the TCP Intercept feature and Snort 3 detection engine that could allow an unauthenticated, remote attacker to bypass configured policies and inject unintended traffic through an affected device. The...

CVE-2026-20349

The CVE-2026-20349 issue affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN, caused by insufficient error checking when processing HTTP requests. An unauthenticated, remote attacker can send a crafted HTTP request to the VPN service and cause the device to reload, triggering a denial-of-...

CVE-2022-20713

CVE-2022-20713 affects Cisco ASA/FTD VPN web client services. Root cause: improper input validation sent to the VPN web client, enabling an unauthenticated user to trigger browser-based attacks (e.g., cross-site scripting) by persuading a user to visit a crafted site. Impact is browser-executable...

CVE-2024-20358

Cisco ASA/FTD restore-functionality command-injection vulnerability (CVE-2024-20358) allows an authenticated, local attacker to execute arbitrary root commands by restoring a crafted backup file. Root access is required, with administrator privileges. Cisco has released updates to fix this vulner...

CVE-2023-20083

CVE-2023-20083 affects Cisco Firepower Threat Defense (FTD) Software in ICMPv6 inspection when Snort 2 is enabled. The flaw stems from improper error checking while parsing ICMPv6 header fields, allowing an unauthenticated remote attacker to trigger CPU exhaustion (up to 100%) and cause a DoS by ...

CVE-2026-20007

The CVE-2026-20007 issue affects Cisco Secure Firewall Threat Defense (FTD) Software with Snort 2/3 deep packet inspection. A logic error in the integration of Snort Engine rules can cause different Snort rules to be hit during deep inspection of inner and outer connections, enabling an unauthent...

CVE-2023-20086

CVE-2023-20086 affects Cisco ASA and Cisco FTD software, where improper ICMPv6 message processing could let an unauthenticated, remote attacker trigger a DoS by forcing a device reload. This is a network-facing issue (CVSS v3.1: 8.6, HIGH, NO privileges required; CPU/network target), with exploit...

CVE-2024-20402

CVE-2024-20402 affects Cisco ASA (SSL VPN) and Cisco FTD (SSL VPN) where a logic error in SSL VPN memory management can be exploited by unauthenticated remote attackers to cause the device to reload, leading to a DoS. Affected components: SSL VPN handling on ASA/FTD software. Root cause: memory-m...

CVE-2023-20070

Cisco Firepower Threat Defense (FTD) Software is affected by CVE-2023-20070 due to a TLS 1.3 memory allocation logic error that can let an unauthenticated remote attacker trigger a reload of the Snort 3 detection engine, causing DoS and dropped packets during reload. The Snort engine restarts aut...

CVE-2023-20042

CVE-2023-20042 affects Cisco ASA/FTD AnyConnect SSL VPN. The root cause is an implementation error in the SSL/TLS session handling that can prevent the release of a session handler, enabling an unauthenticated attacker to send crafted SSL/TLS traffic and exhaust the session handler pool, leading ...

CVE-2024-20412

Cisco Firepower Threat Defense (FTD) Software on Firepower 1000, 2100, 3100, and 4200 Series contains static accounts with hard-coded passwords, enabling an unauthenticated, local attacker to access the CLI with those credentials. A successful exploit could allow data access, limited troubleshoot...

CVE-2025-20182

The CVE-2025-20182 entry describes a DoS vulnerability in IKEv2 message processing affecting Cisco ASA, FTD, IOS, and IOS XE. The root cause is insufficient input validation when handling IKEv2 traffic, which could allow an unauthenticated remote attacker to force a device reload and thus a DoS c...

CVE-2022-20924

CVE-2022-20924 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) software with SNMP. Root cause is insufficient input validation in the SNMP handling, enabling an authenticated, remote attacker to trigger device reloads and a DoS condition. Affected products include Cisco ASA/FTD; exploi...

CVE-2023-20063

Cisco Firepower Threat Defense (FTD) and Cisco Firepower Management Center (FMC) inter-device communication contains a code-injection vulnerability due to insufficient input validation. An authenticated, local attacker who gains admin privileges on an associated device can use expert mode to subm...

CVE-2024-20355

CVE-2024-20355 affects Cisco ASA/FTD SAML SSO. The issue stems from improper separation of authorization domains, allowing an authenticated remote user to reuse a SAML token to access a tunnel group they are not authorized for, enabling a remote VPN session to secured networks behind the device. ...

CVE-2023-20244

CVE-2023-20244 affects Cisco Firepower Threat Defense (FTD) on Cisco Firepower 2100 Series, with vulnerable internal packet processing in the inspection engine. The issue allows an unauthenticated, remote attacker to trigger a DoS by sending crafted packets, potentially depleting all 9,472-byte b...

CVE-2022-20934

CVE-2022-20934 affects Cisco Firepower Threat Defense (FTD) and Cisco FXOS Software. The issue is a command-injection vulnerability in the CLI caused by insufficient input validation, allowing an authenticated, local attacker with Administrator privileges to inject OS commands and gain root acces...

CVE-2023-20031

The CVE-2023-20031 issue affects Cisco Firepower Threat Defense (FTD) with Snort 3, where a logic error in SSL/TLS certificate handling during SSL handshake under load can be exploited by a high rate of connection requests to cause the Snort 3 engine to reload. Consequences documented include pot...

CVE-2023-20270

CVE-2023-20270 concerns Cisco Firepower Threat Defense Software where the SMB protocol preprocessor and Snort 3 detection engine interaction is flawed due to improper error-checking when processing SMB traffic. An unauthenticated, remote attacker could send crafted SMB streams to bypass policies ...

CVE-2023-20071

Cisco CVE-2023-20071 affects the Snort detection engine’s FTP inspection module across multiple Cisco products (notably FTD/ASA family). An unauthenticated, network-accessible attacker can craft FTP traffic to bypass FTP inspection and potentially deliver a payload, per Cisco’s security advisory ...

CVE-2022-20922

The CVE-2022-20922 entry concerns multiple vulnerabilities in the SMB2 processor of the Snort detection engine on Cisco products (Snort 3 configured). Affected component: Snort SMB2 processing; root cause: improper management of system resources while handling SMB2 traffic. Impact: unauthenticate...

CVE-2023-20245

CVE-2023-20245 affects Cisco ASA and Cisco FTD where multiple vulnerabilities in the per-user-override feature can allow an unauthenticated, remote attacker to bypass configured ACLs and let denied traffic flow through an affected device. The issues stem from a logic error in how per-user-overrid...

CVE-2022-20950

Cisco Firepower Threat Defense (FTD) is affected by CVE-2022-20950 due to a lack of error-checking when SIP bidirectional flows are inspected by Snort 3. The vulnerability allows an unauthenticated, remote attacker to trigger a restart of the Snort 3 detection engine, causing a DoS condition. A c...

CVE-2023-20247

Cisco ASA (Adaptive Security Appliance) and Firepower Threat Defense (FTD) Software remote access SSL VPN vulnerabilities allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect with only a valid username/password. Root cause is improp...

CVE-2024-20261

CVE-2024-20261 affects Cisco Firepower Threat Defense (FTD) Software via the file policy feature that inspects encrypted archive files. The issue is a logic error triggered when inspecting a specific class of encrypted archives, allowing an unauthenticated, remote attacker to bypass a configured ...

CVE-2026-20049

CVE-2026-20049 affects Cisco Secure Firewall ASA and Threat Defense (FTD) software. The issue arises in processing GCM-encrypted IKEv2 IPsec traffic due to an insufficiently sized memory allocation, enabling an authenticated attacker to trigger a device reload and DoS. Exploitation requires valid...

CVE-2026-20073

Cisco Secure Firewall ASA and FTD platforms are affected by CVE-2026-20073 due to improper error handling when a cluster-joining device runs out of memory while replicating access control rules. An unauthenticated remote attacker could send traffic that should be blocked, potentially bypassing AC...

CVE-2023-20177

Cisco Firepower Threat Defense (FTD) Software contains a vulnerability in the SSL file policy handling when an SSL/TLS connection uses a URL Category and the Snort 3 detection engine is involved. The issue is a logic error observed as the Snort 3 engine inspects such connections, potentially caus...

CVE-2024-20268

CVE-2024-20268 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) SNMP feature. The issue is caused by insufficient input validation of SNMP packets, allowing an authenticated, remote attacker to trigger a device reload and cause a DoS. The vulnerability affects all SNMP versions (1/2c/3)...

CVE-2024-20426

CVE-2024-20426 affects Cisco ASA and Cisco FTD (IKEv2). A vulnerability in IKEv2 input validation could allow an unauthenticated, remote attacker to cause a DoS by sending crafted IKEv2 traffic, potentially causing the device to reload. Cisco advisory states updates addressing the vulnerability h...

CVE-2023-20256

CVE-2023-20256 relates to multiple vulnerabilities in the per-user-override feature of Cisco ASA and FTD software that could let an unauthenticated, remote attacker bypass ACLs and reach normally protected resources. The root cause is a logic error in how per-user-override rules are constructed/a...

CVE-2024-20342

CVE-2024-20342 : Multiple Cisco products with Snort rate-filtering can be bypassed due to an incorrect connection count comparison. An unauthenticated, remote attacker can send traffic at or above the configured rate to bypass the rate-limiting filter, potentially allowing unintended traffic into...

CVE-2022-20949

CVE-2022-20949 describes a privilege-escalation flaw in the management web server of Cisco Firepower Threat Defense (FTD) Software. An authenticated, remote attacker with high privileges could issue configuration commands on the affected system due to improper access control of HTTPS endpoints, w...

CVE-2024-20493

CVE-2024-20493 affects Cisco ASA (Adaptive Security Appliance) and Cisco FTD (Firepower Threat Defense) during the Remote Access SSL VPN authentication phase. The vulnerability stems from ineffective handling of memory resources in the authentication process, which can be triggered by crafted pac...

CVE-2024-20297

CVE-2024-20297 affects Cisco ASA and Firepower Threat Defense (FTD) via a logic error in populating group ACLs when an AnyConnect client starts a new session. This could allow an unauthenticated, remote attacker to bypass ACL rules and permit traffic that should be denied on the affected device. ...

CVE-2024-20330

CVE-2024-20330 affects Cisco Firepower Threat Defense (FTD) Software on Cisco Firepower 2100 Series Appliances, impacting the Snort TCP/UDP detection engine. The vulnerability arises from improper memory management in the Snort detection engine, allowing unauthenticated remote attackers to trigge...

CVE-2026-20006

CVE-2026-20006 concerns Cisco Secure Firewall Threat Defense software. It reports a vulnerability in the TLS cryptography functionality of Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Engine to restart, resulting in a denial of service. The is...

CVE-2024-20408

The CVE-2024-20408 entry concerns Cisco ASA and FTD Dynamic Access Policies (DAP). The vulnerability arises from improper validation of data in HTTPS POST requests to DAP, enabling an authenticated, remote attacker with valid VPN credentials to cause the device to reload, producing a DoS conditio...

CVE-2024-20299

CVE-2024-20299 affects Cisco ASA (ASA Software) and Cisco FTD (FTD Software). The issue is a logic error in populating group ACLs when an AnyConnect session is established, allowing an unauthenticated, remote attacker to bypass configured ACL rules and pass traffic that should be denied. Public s...

CVE-2024-20485

Cisco ASA/FTD VPN web server vulnerability (CVE-2024-20485) allows an authenticated, local attacker to execute arbitrary code with root privileges after a next device reload. Root cause: improper validation of a file read from system flash memory; attacker can trigger via restoring a crafted back...

CVE-2026-20053

Cisco CVE-2026-20053 affects multiple Cisco products via Snort 3 Visual Basic for Applications (VBA) Decompression Engine. The vulnerability stems from improper range checking when decompressing VBA data, which is user-controlled, enabling an unauthenticated, remote attacker to cause the Snort 3 ...

CVE-2024-20331

The CVE-2024-20331 entry describes a denial-of-service scenario in the Cisco ASA VPN and Firepower Threat Defense (FTD) Remote Access SSL VPN session authentication. Root cause: insufficient entropy in the authentication process, enabling an unauthenticated, remote attacker to determine an authen...

CVE-2024-20341

Summary: CVE-2024-20341 targets Cisco ASA/FTD VPN Web Client Services. A vulnerability in input validation allows an unauthenticated, remote attacker to trigger cross-site scripting (XSS) in a browser accessing the affected device. The attacker persuades a user to click a crafted link, enabling e...

CVE-2024-20351

CVE-2024-20351 describes a Denial of Service vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine used by Cisco Firepower Threat Defense (FTD) software and Cisco FirePOWER Services. An unauthenticated, remote attacker can trigger high traffic volume to cause legitim...

CVE-2024-20384

CVE-2024-20384 affects Cisco ASA (Software) and Cisco FTD, where a logic error in the Network Service Group (NSG) ACL population could let an unauthenticated, remote attacker bypass ACLs and permit traffic that should be denied. The issue arises when NSG ACLs are populated on the device, enabling...