Cisco Cisco Firepower Threat Defense Software

• CVE-2024-20481 Medium 5.8 Exploited A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote at 15.9%
• CVE-2024-20359 Medium 6.0 Exploited A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower T 18.8%
• CVE-2024-20353 High 8.6 Exploited A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote atta 69.8%
• CVE-2023-20269 Medium 5.0 Exploited A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker t 26.6%
• CVE-2025-20363 Critical 9.0 A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, 7.2%
• CVE-2025-20220 Medium 6.0 A vulnerability in the CLI of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arb 0.2%
• CVE-2025-20268 Medium 5.8 Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability 0.5%
• CVE-2025-20254 Medium 5.8 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow 0.5%
• CVE-2025-20263 High 8.6 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability 0.7%
• CVE-2025-20253 High 8.6 Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability 0.5%
• CVE-2025-20252 Medium 5.8 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow 0.5%
• CVE-2025-20251 High 8.5 Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion 0.5%
• CVE-2025-20244 High 7.7 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability 0.6%
• CVE-2025-20243 High 8.6 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability 0.6%
• CVE-2025-20239 High 8.6 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat De 0.6%
• CVE-2025-20237 Medium 6.0 A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbi 0.2%
• CVE-2025-20238 Medium 6.0 A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbi 0.2%
• CVE-2025-20225 Medium 5.8 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat De 0.7%
• CVE-2025-20224 Medium 5.8 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow 0.7%
• CVE-2025-20222 High 8.6 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer Vulnerability 0.7%
• CVE-2025-20219 Medium 5.3 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Bypass Vulnerability 0.4%
• CVE-2025-20217 High 8.6 Cisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability 0.7%
• CVE-2025-20136 High 8.6 Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability 0.7%
• CVE-2025-20135 Medium 4.3 Cisco Adaptive Security Appliance and Firepower Threat Defense Software DHCP Denial of Service Vulnerability 0.2%
• CVE-2025-20127 High 7.7 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service Vulnerability 0.7%
• CVE-2025-20133 High 8.6 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability 0.8%
• CVE-2025-20134 High 8.6 Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificate Denial of Service Vulnerability 0.4%
• CVE-2025-20182 High 8.6 Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software and IOS XE Software IKEv2 Denial of Service Vulnerability 0.6%
• CVE-2021-1494 Medium 5.8 Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerabil 1.1%
• CVE-2021-34753 Medium 5.8 Cisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities 0.7%
• CVE-2021-34752 Medium 6.7 Cisco Firepower Threat Defense Command Injection Vulnerabilities 0.3%
• CVE-2022-20685 High 7.5 Multiple Cisco Products Snort Modbus Denial of Service Vulnerability 1.5%
• CVE-2024-20495 High 8.6 A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker t 0.5%
• CVE-2024-20494 High 8.6 A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attac 0.5%
• CVE-2024-20493 Medium 5.3 A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software cou 0.6%
• CVE-2024-20485 Medium 6.0 A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbi 0.2%
• CVE-2024-20431 Medium 5.8 A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy. This v 0.4%
• CVE-2024-20426 High 8.6 A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could 0.5%
• CVE-2024-20412 Critical 9.3 A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using 0.2%
• CVE-2024-20408 High 7.7 A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote 0.4%
• CVE-2024-20407 Medium 5.8 A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker t 0.4%
• CVE-2024-20402 High 8.6 A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a 0.5%
• CVE-2024-20388 Medium 5.3 A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on an affected device. 0.5%
• CVE-2024-20384 Medium 5.8 A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote 0.5%
• CVE-2024-20382 Medium 6.1 A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote atta 0.4%
• CVE-2024-20370 Medium 6.0 A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authe 0.2%
• CVE-2024-20351 High 8.6 Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability 0.7%
• CVE-2024-20342 Medium 5.8 Cisco Firepower Threat Defense Software Rate Filter Bypass Vulnerability 0.5%
• CVE-2024-20341 Medium 6.1 Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability 0.4%
• CVE-2024-20339 High 8.6 Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability 0.7%