Advisories · Technology
Cisco Firepower Threat Defense Software.
Every CVE that names Cisco Firepower Threat Defense Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Infinite loop in Cisco Firepower Threat Defense Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 4.0 Medium
Improper access control in Cisco Firepower Threat Defense Software
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 5.0 Medium
Authentication bypass in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 8.6 High
Resource leak in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 5.8 Medium
Authentication bypass by spoofing in Cisco Firepower Threat Defense Software and others
- Cisco Firepower Threat Defense Software
- Cisco Umbrella Insights Virtual Appliance
- Authentication bypass
- CVSS 8.2 High
Cisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center Code Injection Vulnerability
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- Code injection
- CVSS 6.8 Medium
Improper resource shutdown in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 6.1 Medium
Open redirect in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Open redirect
- CVSS 4.0 Medium
A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedl…
- Cisco Firepower Threat Defense Software
- CWE-244
- CVSS 5.8 Medium
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system.
- Cisco Firepower Threat Defense Software
- Cisco Umbrella Insights Virtual Appliance
- CWE-1039
- CVSS 4.0 Medium
A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…
- Cisco Firepower Threat Defense Software
- CWE-244
- CVSS 5.8 Medium
Authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 5.0 Medium
Authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 5.8 Medium
Improper input validation in Cisco Firepower Threat Defense Software
- Cisco Firepower Threat Defense Software
- CWE-20
- CVSS 8.6 High
A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a…
- Cisco Firepower Threat Defense Software
- CWE-771
- CVSS 8.6 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-248
- CVSS 4.0 Medium
A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category and the Snort 3 detect…
- Cisco Firepower Threat Defense Software
- CWE-244
- CVSS 5.0 MediumCritical · KEVKEV · ransomware
Authentication bypass in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Authentication bypass
- CVSS 4.4 Medium
External control of a file path in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Path traversal
- CVSS 8.6 High
Incorrect numeric conversion in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-681
- CVSS 5.3 Medium
Observable discrepancy in Cisco Firepower Threat Defense Software
- Cisco Firepower Threat Defense Software
- Information disclosure
- CVSS 5.8 Medium
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the…
- Cisco Firepower Threat Defense Software
- Cisco Cyber Vision
- CWE-244
- CVSS 5.8 Medium
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the…
- Cisco Firepower Threat Defense Software
- Cisco Umbrella Insights Virtual Appliance
- CWE-244
- CVSS 5.8 Medium
Incorrect authorization in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 6.0 Medium
Command injection in Cisco Firepower Threat Defense Software and others
- Cisco Firepower Threat Defense Software
- Cisco Firepower Extensible Operating System (FXOS)
- Command injection
- CVSS 5.8 Medium
Resource allocation without limits in Cisco Firepower Threat Defense Software
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 6.5 Medium
A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on a…
- Cisco Firepower Threat Defense Software
- CWE-399
- CVSS 6.4 Medium
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-501
- CVSS 7.5 High
Uncontrolled resource consumption in Cisco Firepower Management Center and others
- Cisco Firepower Management Center
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 7.7 High
Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-703
- CVSS 7.7 High
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Heap-based buffer overflow in Cisco Firepower Threat Defense Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 4.3 Medium
HTTP request smuggling in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- HTTP request smuggling
- CVSS 4.4 Medium
Cisco Firepower Threat Defense Software XML Injection Vulnerability
- Cisco Firepower Threat Defense Software
- Other injection
- CVSS 4.0 Medium
Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-241
- CVSS 8.6 High
Cisco Firepower Threat Defense Software DNS Enforcement Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-399
- CVSS 8.6 High
Cisco Firepower Threat Defense Software Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 8.6 High
Cisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 5.3 Medium
Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-664
- CVSS 8.6 High
Cisco Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability
- Cisco Adaptive Security Appliance Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability
- Cisco Adaptive Security Appliance Software
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 8.6 High
Multiple Cisco Products Snort Rule Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-241
- CVSS 6.8 Medium
Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 4.4 Medium
Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability
- Cisco Firepower Threat Defense Software
- Path traversal
- CVSS 6.7 Medium
Cisco Firepower Threat Defense Software Command Injection Vulnerabilities
- Cisco Firepower Threat Defense Software
- CWE-20
- CVSS 6.7 Medium
Cisco Firepower Threat Defense Software Command Injection Vulnerabilities
- Cisco Firepower Threat Defense Software
- CWE-20
- CVSS 5.8 Medium
Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities
- Cisco Firepower Threat Defense Software
- Broken access control
- CVSS 6.3 Medium
Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability
- Cisco Firepower Threat Defense Software
- Code injection
- CVSS 5.8 Medium
Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CVSS 4.9 Medium
Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Denial of service
- CVSS 7.8 High
Cisco Firepower Threat Defense Software Command Injection Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-20
- CVSS 5.4 Medium
Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability
- Cisco Firepower Threat Defense Software
- XML external entities (XXE)
- CVSS 6.0 Medium
Cisco Firepower Threat Defense Software Command File Overwrite Vulnerability
- Cisco Firepower Threat Defense Software
- Information disclosure
- CVSS 8.6 High
Cisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Memory corruption
- CVSS 4.0 Medium
Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-670
- CVSS 5.8 Medium
Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-693
- CVSS 5.8 Medium
Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-693
- CVSS 8.6 High
Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability
- Cisco Firepower Threat Defense Software
- Memory corruption