Advisories · Technology
Cisco Firepower Threat Defense Software.
Every CVE that names Cisco Firepower Threat Defense Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.0 CriticalCritical · CVSS 9+
Heap-based buffer overflow in Cisco IOS and others
- Cisco IOS
- Cisco IOS XR Software
- Memory corruption
- CVSS 6.0 Medium
OS command injection in Cisco Firepower Management Center and others
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- Command injection
- CVSS 5.8 Medium
Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-229
- CVSS 5.8 Medium
Memory leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 5.8 Medium
Memory leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.5 High
Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1287
- CVSS 7.7 High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1287
- CVSS 8.6 High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 6.0 Medium
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arb…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-146
- CVSS 6.0 Medium
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arb…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1244
- CVSS 5.8 Medium
Memory leak in Cisco IOS and others
- Cisco IOS
- Cisco Adaptive Security Appliance (ASA) Software
- Denial of service
- CVSS 5.8 Medium
Memory leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer Vulnerability
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 5.3 Medium
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Bypass Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 8.6 High
Cisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 4.3 Medium
Cisco Adaptive Security Appliance and Firepower Threat Defense Software DHCP Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 7.7 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software and IOS XE Software IKEv2 Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 5.8 Medium
Protection mechanism failure in Cisco Firepower Threat Defense Software and others
- Cisco Firepower Threat Defense Software
- Cisco UTD SNORT IPS Engine Software
- CWE-693
- CVSS 5.8 Medium
Cisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 6.7 Medium
Cisco Firepower Threat Defense Command Injection Vulnerabilities
- Cisco Firepower Threat Defense Software
- CWE-20
- CVSS 7.5 High
Multiple Cisco Products Snort Modbus Denial of Service Vulnerability
- Cisco Cyber Vision
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Improper input validation in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-20
- CVSS 8.6 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1287
- CVSS 5.3 Medium
Resource leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 6.0 Medium
Code injection in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Code injection
- CVSS 5.8 MediumCritical · KEVKEV
Resource leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 5.8 Medium
A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy.
- Cisco Firepower Threat Defense Software
- CWE-229
- CVSS 8.6 High
NULL pointer dereference in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Hard-coded password in Cisco Firepower Threat Defense Software
- Cisco Firepower Threat Defense Software
- Hard-coded credentials
- CVSS 7.7 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-1287
- CVSS 5.8 Medium
A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker…
- Cisco Firepower Threat Defense Software
- CWE-399
- CVSS 8.6 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA)…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 5.3 Medium
Cisco Firepower Management Center: A vulnerability in the password change feature of Cisco Firepower Management Center (FMC)…
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- CWE-202
- CVSS 5.8 Medium
Authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 6.1 Medium
Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Cross-site scripting (XSS)
- CVSS 6.0 Medium
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-264
- CVSS 8.6 High
Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 5.8 Medium
Cisco Firepower Threat Defense Software Rate Filter Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-1025
- CVSS 6.1 Medium
Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Cross-site scripting (XSS)
- CVSS 8.6 High
Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 6.8 Medium
Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Weak cryptography or TLS
- CVSS 8.6 High
Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series TCP UDP Snort 2 and Snort 2 Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 5.8 Medium
Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 5.8 Medium
Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 7.7 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-231
- CVSS 5.8 Medium
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-436
- CVSS 5.0 Medium
Missing authorization in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 5.8 Medium
Cisco Firepower Management Center: A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco…
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- CWE-264
- CVSS 5.8 Medium
Improper access control in Cisco Firepower Threat Defense Software
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 5.8 Medium
Authentication bypass by spoofing in Cisco Firepower Threat Defense Software and others
- Cisco Firepower Threat Defense Software
- Cisco UTD SNORT IPS Engine Software
- Authentication bypass
- CVSS 6.0 MediumCritical · KEVKEV
Code injection in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Code injection
- CVSS 8.6 HighCritical · KEV, CVSS 7+ and EPSSKEV
Infinite loop in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 4.1 Medium
Origin validation error in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-346