firepower_threat_defense_software vulnerabilities
13 known vulnerabilities in firepower_threat_defense_software from Cisco. 11 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.6 High severity
A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA)…
A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a de
- 8.6 High severity
Cisco Adaptive Security Appliance (ASA) Software: Improper Validation of Specified Type of Input
A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in
- 5.8 Medium severity
Cisco ASA and FTD Denial-of-Service Exploited
A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN servi
- 8.6 High severity
Cisco Adaptive Security Appliance (ASA) Software: NULL Pointer Dereference
A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial
- 8.4 High severity
Cisco Firepower Threat Defense Software: Use of Hard-coded Credentials
A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using static credentials. This vulnerability is due to the presen
- 8.6 High severity
Cisco Adaptive Security Appliance (ASA) Software: Access of Memory Location After End of Buffer
A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a den
- 7.5 High severity
Cisco Firepower Threat Defense Software: Uncontrolled Resource Consumption
A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat Defense (FTD) Software and Cisco FirePOWER Services could allow an unauthenticated, remote attacker to cause legitimate network traffic to be droppe
- 8.6 High severity
Cisco Firepower Threat Defense Software: Comparison Using Wrong Factors
Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured rate limiting filter. This vulnerability is due to an incorrec
- 7.5 High severity
Cisco Firepower Threat Defense Software: NULL Pointer Dereference
A vulnerability in the TLS processing feature of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerabilit
- 7.5 High severity
Cisco Firepower Threat Defense Software: Access of Memory Location After End of Buffer
A vulnerability in the Snort 2 and Snort 3 TCP and UDP detection engine of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Appliances could allow an unauthenticated, remote attacker to cause memory corruption, which could cause th
- 8.6 High severity
Cisco Secure Firewall Adaptive Security…: Memory Allocation with Excessive Size Value
Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability af
- 6.0 Medium severity
Cisco ASA and FTD Privilege Escalation Exploited
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, l
- 8.6 High severity
Cisco ASA and FTD Denial of Service Exploited
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting i