Priority MEDIUM 46
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of s…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01362 · Published 2021-10-27 · No fix listed CWE-121
Priority MEDIUM 47
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of servi…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01729 · Published 2021-10-27 · No fix listed CWE-119
Priority LOW 32
A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00944 · Published 2021-10-27 · No fix listed CWE-284
Priority MEDIUM 44
A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poiso…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00586 · Published 2021-10-27 · No fix listed CWE-924
Priority MEDIUM 46
A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01444 · Published 2021-10-27 · No fix listed CWE-400
Priority LOW 26
Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allo…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01145 · Published 2021-10-27 · No fix listed CWE-358
Priority LOW 26
Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allo…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01145 · Published 2021-10-27 · No fix listed CWE-358
Priority LOW 32
A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote a…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01045 · Published 2021-10-27 · No fix listed CWE-183
Priority MEDIUM 46
A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an af…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01614 · Published 2021-10-27 · No fix listed CWE-119
Priority LOW 31
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote att…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01024 · Published 2021-10-27 · No fix listed CWE-416
Priority MEDIUM 47
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Firepower Threat Defense (FTD) Software when running on the Cisco Firepower 1000 Series platform could allow an unauthenti…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.02021 · Published 2020-05-06 · No fix listed CWE-119
Priority MEDIUM 43
A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01856 · Published 2020-05-06 · No fix listed CWE-400
Priority MEDIUM 43
Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, rem…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01985 · Published 2020-05-06 · No fix listed CWE-400
Priority MEDIUM 47
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticate…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01912 · Published 2020-05-06 · No fix listed CWE-400
Priority MEDIUM 43
A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01912 · Published 2020-05-06 · No fix listed CWE-400
Priority MEDIUM 47
A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to u…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01857 · Published 2020-05-06 · No fix listed CWE-20
Priority MEDIUM 47
A vulnerability in the VPN System Logging functionality for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak that can deplete system memory over time, w…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01856 · Published 2020-05-06 · No fix listed CWE-400
Priority LOW 34
A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01732 · Published 2020-05-06 · No fix listed CWE-399
Priority CRITICAL 92
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory tra…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.96503 · Published 2020-05-06 · No fix listed CWE-22
Priority MEDIUM 47
A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center (KDC) and byp…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02417 · Published 2020-05-06 · No fix listed CWE-287
Priority MEDIUM 43
A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02 · Published 2020-05-06 · No fix listed CWE-415
Priority LOW 33
A vulnerability in the management access list configuration of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured management interface access list on an a…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01374 · Published 2020-05-06 · No fix listed CWE-284
Priority MEDIUM 47
A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01985 · Published 2019-10-02 · No fix listed CWE-399