Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

56 records in Firepower Extensible Operating System · all components

Priority MEDIUM 56

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of serv…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03955 Published 2018-06-21 No fix listed CWE-399
Priority MEDIUM 53

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to ex…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08684 Published 2016-01-22 No fix listed CWE-78
Priority MEDIUM 48

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to lea…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0239 Published 2019-05-16 No fix listed CWE-20
Priority MEDIUM 48

Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affec…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0254 Published 2019-03-07 Fixed in 2.0.1.201, 2.2.2.54 +7 CWE-20
Priority MEDIUM 48

Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affec…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0254 Published 2019-03-07 Fixed in 2.0.1.201, 2.2.2.54 +5 CWE-20
Priority MEDIUM 46

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) con…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01383 Published 2020-08-27 No fix listed CWE-476
Priority MEDIUM 45

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbi…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03802 Published 2017-11-02 No fix listed CWE-20
Priority MEDIUM 45

A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0445 Published 2017-10-19 No fix listed CWE-770
Priority MEDIUM 44

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (Do…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01894 Published 2020-02-26 No fix listed CWE-20
Priority MEDIUM 44

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02691 Published 2018-06-21 No fix listed CWE-399
Priority MEDIUM 42

A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01039 Published 2018-06-21 No fix listed CWE-20
Priority MEDIUM 41

A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected devi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00556 Published 2020-10-21 No fix listed CWE-352
Priority MEDIUM 41

A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition w…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00788 Published 2018-10-17 Fixed in 6.2(1), <2.3.1.58 CWE-20
Priority MEDIUM 40

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileg…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00457 Published 2021-02-24 No fix listed CWE-787
Priority LOW 38

A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00898 Published 2020-02-26 No fix listed CWE-78
Priority LOW 38

Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with r…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00905 Published 2019-10-02 No fix listed CWE-20
Priority LOW 35

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00764 Published 2017-04-07 No fix listed CWE-78
Priority LOW 35

A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an a…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00764 Published 2017-04-07 No fix listed CWE-78
Priority LOW 33

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjac…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00389 Published 2021-09-23 No fix listed CWE-20
Priority LOW 33

A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower Management Center (FMC) Software, and Cisco FXOS Software could all…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01879 Published 2019-10-02 No fix listed CWE-400
Priority LOW 33

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local…

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00775 Published 2017-04-07 No fix listed CWE-78
Load more
Open these records in search →