A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD)…
Priority LOW 39CWE-771Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain packets when they are sent to the inspection engine. An attacker could exploit this vulnerability by sending a series of crafted packets to an affected device. A successful exploit could allow the attacker to deplete all 9,472 byte blocks on the device, resulting in traffic loss across the device or an unexpected reload of the device. If the device does not reload on its own, a manual reload of the device would be required to recover from this state.
Why it matters now
EPSS 0.01041 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Cisco | Cisco Firepower Threat Defense Software | 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; 6.2.3.6; 6.2.3.7; 6.2.3.8; 6.2.3.10; 6.2.3.11; 6.2.3.9; 6.2.3.12; 6.2.3.13; 6.2.3.14; 6.2.3.15; 6.2.3.16; 6.2.3.17; 6.2.3.18; 6.6.0; 6.6.0.1; 6.6.1; 6.6.3; 6.6.4; 6.6.5; 6.6.5.1; 6.6.5.2; 6.6.7; 6.6.7.1; 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; 6.4.0.6; 6.4.0.7; 6.4.0.8; 6.4.0.9; 6.4.0.10; 6.4.0.11; 6.4.0.12; 6.4.0.13; 6.4.0.14; 6.4.0.15; 6.4.0.16; 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; 7.0.4; 7.0.5; 7.1.0; 7.1.0.1; 7.1.0.3; 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.3.0; 7.3.1; 7.3.1.1 | — | No fix listed | CNA |
- Cisco Firepower Threat Defense Software VendorCisco Affected 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; 6.2.3.6; 6.2.3.7; 6.2.3.8; 6.2.3.10; 6.2.3.11; 6.2.3.9; 6.2.3.12; 6.2.3.13; 6.2.3.14; 6.2.3.15; 6.2.3.16; 6.2.3.17; 6.2.3.18; 6.6.0; 6.6.0.1; 6.6.1; 6.6.3; 6.6.4; 6.6.5; 6.6.5.1; 6.6.5.2; 6.6.7; 6.6.7.1; 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; 6.4.0.6; 6.4.0.7; 6.4.0.8; 6.4.0.9; 6.4.0.10; 6.4.0.11; 6.4.0.12; 6.4.0.13; 6.4.0.14; 6.4.0.15; 6.4.0.16; 6.7.0; 6.7.0.1; 6.7.0.2; 6.7.0.3; 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; 7.0.4; 7.0.5; 7.1.0; 7.1.0.1; 7.1.0.3; 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.3.0; 7.3.1; 7.3.1.1 Fixed in — No fix listed CNA
CPE configurations NVD · 74
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3:*:*:*:*:*:*:* | 6.2.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.1:*:*:*:*:*:*:* | 6.2.3.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.2:*:*:*:*:*:*:* | 6.2.3.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.3:*:*:*:*:*:*:* | 6.2.3.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.4:*:*:*:*:*:*:* | 6.2.3.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.5:*:*:*:*:*:*:* | 6.2.3.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.6:*:*:*:*:*:*:* | 6.2.3.6 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.7:*:*:*:*:*:*:* | 6.2.3.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.8:*:*:*:*:*:*:* | 6.2.3.8 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.9:*:*:*:*:*:*:* | 6.2.3.9 | Vulnerable | Cisco |
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3:*:*:*:*:*:*:* Versions 6.2.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.1:*:*:*:*:*:*:* Versions 6.2.3.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.2:*:*:*:*:*:*:* Versions 6.2.3.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.3:*:*:*:*:*:*:* Versions 6.2.3.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.4:*:*:*:*:*:*:* Versions 6.2.3.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.5:*:*:*:*:*:*:* Versions 6.2.3.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.6:*:*:*:*:*:*:* Versions 6.2.3.6 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.7:*:*:*:*:*:*:* Versions 6.2.3.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.8:*:*:*:*:*:*:* Versions 6.2.3.8 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.9:*:*:*:*:*:*:* Versions 6.2.3.9 Vulnerable ·Cisco
Show 64 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.10:*:*:*:*:*:*:* | 6.2.3.10 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.11:*:*:*:*:*:*:* | 6.2.3.11 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.12:*:*:*:*:*:*:* | 6.2.3.12 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.13:*:*:*:*:*:*:* | 6.2.3.13 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.14:*:*:*:*:*:*:* | 6.2.3.14 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.15:*:*:*:*:*:*:* | 6.2.3.15 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.16:*:*:*:*:*:*:* | 6.2.3.16 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.17:*:*:*:*:*:*:* | 6.2.3.17 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.18:*:*:*:*:*:*:* | 6.2.3.18 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0:*:*:*:*:*:*:* | 6.4.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.1:*:*:*:*:*:*:* | 6.4.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.2:*:*:*:*:*:*:* | 6.4.0.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.3:*:*:*:*:*:*:* | 6.4.0.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.4:*:*:*:*:*:*:* | 6.4.0.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.5:*:*:*:*:*:*:* | 6.4.0.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.6:*:*:*:*:*:*:* | 6.4.0.6 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.7:*:*:*:*:*:*:* | 6.4.0.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.8:*:*:*:*:*:*:* | 6.4.0.8 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.9:*:*:*:*:*:*:* | 6.4.0.9 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.10:*:*:*:*:*:*:* | 6.4.0.10 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.11:*:*:*:*:*:*:* | 6.4.0.11 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.12:*:*:*:*:*:*:* | 6.4.0.12 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.13:*:*:*:*:*:*:* | 6.4.0.13 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.14:*:*:*:*:*:*:* | 6.4.0.14 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.15:*:*:*:*:*:*:* | 6.4.0.15 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.16:*:*:*:*:*:*:* | 6.4.0.16 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:*:*:*:*:*:*:* | 6.6.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1:*:*:*:*:*:*:* | 6.6.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1:*:*:*:*:*:*:* | 6.6.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3:*:*:*:*:*:*:* | 6.6.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4:*:*:*:*:*:*:* | 6.6.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5:*:*:*:*:*:*:* | 6.6.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.1:*:*:*:*:*:*:* | 6.6.5.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.2:*:*:*:*:*:*:* | 6.6.5.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7:*:*:*:*:*:*:* | 6.6.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7.1:*:*:*:*:*:*:* | 6.6.7.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0:*:*:*:*:*:*:* | 6.7.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.1:*:*:*:*:*:*:* | 6.7.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.2:*:*:*:*:*:*:* | 6.7.0.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.3:*:*:*:*:*:*:* | 6.7.0.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0:*:*:*:*:*:*:* | 7.0.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0.1:*:*:*:*:*:*:* | 7.0.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1:*:*:*:*:*:*:* | 7.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1.1:*:*:*:*:*:*:* | 7.0.1.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2:*:*:*:*:*:*:* | 7.0.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2.1:*:*:*:*:*:*:* | 7.0.2.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.3:*:*:*:*:*:*:* | 7.0.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.4:*:*:*:*:*:*:* | 7.0.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.5:*:*:*:*:*:*:* | 7.0.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0:*:*:*:*:*:*:* | 7.1.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.1:*:*:*:*:*:*:* | 7.1.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.3:*:*:*:*:*:*:* | 7.1.0.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0:*:*:*:*:*:*:* | 7.2.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0.1:*:*:*:*:*:*:* | 7.2.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.1:*:*:*:*:*:*:* | 7.2.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.2:*:*:*:*:*:*:* | 7.2.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.3:*:*:*:*:*:*:* | 7.2.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.0:*:*:*:*:*:*:* | 7.3.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1:*:*:*:*:*:*:* | 7.3.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.1:*:*:*:*:*:*:* | 7.3.1.1 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:firepower_2110:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_2120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_2130:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_2140:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.10:*:*:*:*:*:*:* Versions 6.2.3.10 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.11:*:*:*:*:*:*:* Versions 6.2.3.11 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.12:*:*:*:*:*:*:* Versions 6.2.3.12 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.13:*:*:*:*:*:*:* Versions 6.2.3.13 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.14:*:*:*:*:*:*:* Versions 6.2.3.14 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.15:*:*:*:*:*:*:* Versions 6.2.3.15 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.16:*:*:*:*:*:*:* Versions 6.2.3.16 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.17:*:*:*:*:*:*:* Versions 6.2.3.17 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.18:*:*:*:*:*:*:* Versions 6.2.3.18 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0:*:*:*:*:*:*:* Versions 6.4.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.1:*:*:*:*:*:*:* Versions 6.4.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.2:*:*:*:*:*:*:* Versions 6.4.0.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.3:*:*:*:*:*:*:* Versions 6.4.0.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.4:*:*:*:*:*:*:* Versions 6.4.0.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.5:*:*:*:*:*:*:* Versions 6.4.0.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.6:*:*:*:*:*:*:* Versions 6.4.0.6 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.7:*:*:*:*:*:*:* Versions 6.4.0.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.8:*:*:*:*:*:*:* Versions 6.4.0.8 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.9:*:*:*:*:*:*:* Versions 6.4.0.9 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.10:*:*:*:*:*:*:* Versions 6.4.0.10 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.11:*:*:*:*:*:*:* Versions 6.4.0.11 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.12:*:*:*:*:*:*:* Versions 6.4.0.12 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.13:*:*:*:*:*:*:* Versions 6.4.0.13 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.14:*:*:*:*:*:*:* Versions 6.4.0.14 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.15:*:*:*:*:*:*:* Versions 6.4.0.15 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.16:*:*:*:*:*:*:* Versions 6.4.0.16 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:*:*:*:*:*:*:* Versions 6.6.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1:*:*:*:*:*:*:* Versions 6.6.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1:*:*:*:*:*:*:* Versions 6.6.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3:*:*:*:*:*:*:* Versions 6.6.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4:*:*:*:*:*:*:* Versions 6.6.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5:*:*:*:*:*:*:* Versions 6.6.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.1:*:*:*:*:*:*:* Versions 6.6.5.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.2:*:*:*:*:*:*:* Versions 6.6.5.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7:*:*:*:*:*:*:* Versions 6.6.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7.1:*:*:*:*:*:*:* Versions 6.6.7.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0:*:*:*:*:*:*:* Versions 6.7.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.1:*:*:*:*:*:*:* Versions 6.7.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.2:*:*:*:*:*:*:* Versions 6.7.0.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.3:*:*:*:*:*:*:* Versions 6.7.0.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0.1:*:*:*:*:*:*:* Versions 7.0.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1.1:*:*:*:*:*:*:* Versions 7.0.1.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2.1:*:*:*:*:*:*:* Versions 7.0.2.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.3:*:*:*:*:*:*:* Versions 7.0.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.4:*:*:*:*:*:*:* Versions 7.0.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.5:*:*:*:*:*:*:* Versions 7.0.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0:*:*:*:*:*:*:* Versions 7.1.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.1:*:*:*:*:*:*:* Versions 7.1.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.3:*:*:*:*:*:*:* Versions 7.1.0.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0:*:*:*:*:*:*:* Versions 7.2.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0.1:*:*:*:*:*:*:* Versions 7.2.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.1:*:*:*:*:*:*:* Versions 7.2.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.2:*:*:*:*:*:*:* Versions 7.2.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.3:*:*:*:*:*:*:* Versions 7.2.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.0:*:*:*:*:*:*:* Versions 7.3.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1:*:*:*:*:*:*:* Versions 7.3.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.1:*:*:*:*:*:*:* Versions 7.3.1.1 Vulnerable ·Cisco
- cpe:2.3:h:cisco:firepower_2110:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_2120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_2130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_2140:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20244
- 2026-10-03 Alias added: GHSA-6488-32xg-xmmj
References
Advisory 1
More Cisco Secure Firewall Threat Defense vulnerabilities
- TI-2025-14628 Buffer overflow in Cisco Secure Firewall Adaptive Security Appliance Software KEVCVSS 3.1CRITICAL 9.9
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
- TI-2023-06973 Authentication bypass in Cisco Adaptive Security Appliance Software KEVCVSS 3.1CRITICAL 9.1
- TI-2026-82192 Denial of service in Cisco Secure Firewall ASA and FTD SSL VPN KEVCVSS 3.1HIGH 8.6
- TI-2026-16533 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense… KEVCVSS 3.1HIGH 8.6
- TI-2025-14657 Missing authorization in Cisco Secure Firewall Adaptive Security Appliance Software KEVCVSS 3.1HIGH 8.6
Sources
- CVE-2023-20244 · CVE Program
- CVE-2023-20244 · NVD
- FIRST EPSS
- GHSA-6488-32xg-xmmj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences