Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

23 records

Priority MEDIUM 46

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01362 Published 2021-10-27 No fix listed CWE-121
Priority MEDIUM 47

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of servi…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01729 Published 2021-10-27 No fix listed CWE-119
Priority LOW 32

A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00944 Published 2021-10-27 No fix listed CWE-284
Priority MEDIUM 44

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poiso…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00586 Published 2021-10-27 No fix listed CWE-924
Priority MEDIUM 46

A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01444 Published 2021-10-27 No fix listed CWE-400
Priority LOW 26

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01145 Published 2021-10-27 No fix listed CWE-358
Priority LOW 26

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01145 Published 2021-10-27 No fix listed CWE-358
Priority MEDIUM 46

A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an af…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01614 Published 2021-10-27 No fix listed CWE-119
Priority LOW 31

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote att…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01024 Published 2021-10-27 No fix listed CWE-416
Priority MEDIUM 47

A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software when running on the Cisco Firepower 1000 Series platform could allow an unauthenti…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02021 Published 2020-05-06 No fix listed CWE-119
Priority MEDIUM 43

A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01856 Published 2020-05-06 No fix listed CWE-400
Priority MEDIUM 43

Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, rem…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01985 Published 2020-05-06 No fix listed CWE-400
Priority MEDIUM 47

A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticate…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01912 Published 2020-05-06 No fix listed CWE-400
Priority MEDIUM 43

A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01912 Published 2020-05-06 No fix listed CWE-400
Priority MEDIUM 47

A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to u…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01857 Published 2020-05-06 No fix listed CWE-20
Priority MEDIUM 47

A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete system memory over time, w…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01856 Published 2020-05-06 No fix listed CWE-400
Priority LOW 34

A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01732 Published 2020-05-06 No fix listed CWE-399
Priority CRITICAL 92

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory tra…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.96503 Published 2020-05-06 No fix listed CWE-22
Priority MEDIUM 47

A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and byp…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02417 Published 2020-05-06 No fix listed CWE-287
Priority MEDIUM 43

A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02 Published 2020-05-06 No fix listed CWE-415
Priority LOW 33

A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an a…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01374 Published 2020-05-06 No fix listed CWE-284
Priority MEDIUM 47

A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01985 Published 2019-10-02 No fix listed CWE-399