Secure Firewall Threat Defense vulnerabilities

59 known vulnerabilities in Secure Firewall Threat Defense from Cisco. 56 are rated high or critical, and 12 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cisco Firepower Threat Defense Software: Out-of-bounds Write

  CVE-2022-20946Nov 15, 2022CiscoEPSS 1.03%

  A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vu

• 7.5 High severity

  Cisco Firepower Management Center: Improper Handling of Exceptional Conditions

  CVE-2022-20854Nov 15, 2022CiscoEPSS 1.03%

  A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device

• 7.5 High severity

  Cisco Adaptive Security Appliance (ASA) Software: Observable Discrepancy

  CVE-2022-20866Aug 10, 2022CiscoEPSS 18.2%

  A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability

• 7.5 High severity

  Cisco Firepower Threat Defense Software: Allocation of Resources Without Limits or Throttling

  CVE-2022-20767May 3, 2022CiscoEPSS 1.69%

  A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper hand

• 7.5 High severity

  Cisco Adaptive Security Appliance (ASA) Software: Uncontrolled Resource Consumption

  CVE-2022-20760May 3, 2022CiscoEPSS 1.61%

  A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service condition (DoS) on an affected device. Th

• 8.8 High severity

  Cisco Adaptive Security Appliance (ASA) Software: Improper Privilege Management

  CVE-2022-20759May 3, 2022CiscoEPSS 28.7%

  A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, but unprivileged, remote attacker to elevate privil

• 7.5 High severity

  Cisco Firepower Threat Defense Software: Allocation of Resources Without Limits or Throttling

  CVE-2022-20757May 3, 2022CiscoEPSS 1.26%

  A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper traff

• 7.5 High severity

  Cisco Firepower Threat Defense Software: Allocation of Resources Without Limits or Throttling

  CVE-2022-20751May 3, 2022CiscoEPSS 1.36%

  A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service (DoS) condition on an aff

• 7.5 High severity

  Cisco Firepower Threat Defense Software: NULL Pointer Dereference

  CVE-2022-20746May 3, 2022CiscoEPSS 1.36%

  A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper handling of TCP flows. An atta

• 7.5 High severity

  A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive…

  CVE-2022-20745May 3, 2022CiscoEPSS 1.5%

  A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS

• 7.4 High severity

  Cisco Adaptive Security Appliance (ASA) Software: Missing Cryptographic Step

  CVE-2022-20742May 3, 2022Cisco

  A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to read or modify data within an IPsec IKEv2 VPN tunnel. This vulnerab

• 7.5 High severity

  Cisco Firepower Threat Defense Software: Improper Handling of Unexpected Data Type

  CVE-2022-20730May 3, 2022Cisco

  A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processi

• 7.8 High severity

  Cisco Firepower Threat Defense Software: XML Injection

  CVE-2022-20729May 3, 2022Cisco

  A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject XML into the command parser. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability

• 8.6 High severity

  A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance…

  CVE-2022-20715May 3, 2022CiscoEPSS 1.36%

  A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affec

• 7.5 High severity

  Cisco Adaptive Security Appliance (ASA) Software: Insufficient Verification of Data Authenticity

  CVE-2022-20795Apr 21, 2022Cisco

  A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization, resul

• 6.1 Medium severity

  Cisco ASA and FTD Cross-Site Scripting (XSS) Exploited

  CVE-2020-3580Oct 21, 2020CiscoEPSS 85.6%

  Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a

• 7.5 High severity

  Cisco ASA and FTD Read-Only Path Traversal Exploited

  CVE-2020-3452Jul 22, 2020CiscoEPSS 100%

  A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files

• 7.5 High severity

  Cisco ASA and FTD Information Disclosure Exploited

  CVE-2020-3259May 6, 2020CiscoEPSS 71.5%

  A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could l

• 7.5 High severity

  Cisco Adaptive Security Appliance (ASA) Denial-of-Service Exploited

  CVE-2018-0296Jun 7, 2018Cisco Adaptive Security Appliance unknownEPSS 99.9%

  A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on cer