Cisco Cisco Firepower Threat Defense Software

• CVE-2024-20331 Medium 6.8 Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS Vulnerability 0.7%
• CVE-2024-20330 High 8.6 Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series TCP UDP Snort 2 and Snort 2 Denial of Service Vulnerability 0.7%
• CVE-2024-20299 Medium 5.8 Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability 0.5%
• CVE-2024-20297 Medium 5.8 Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability 0.5%
• CVE-2024-20268 High 7.7 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability 0.6%
• CVE-2024-20293 Medium 5.8 A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, 0.4%
• CVE-2024-20355 Medium 5.0 A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Softw 0.3%
• CVE-2024-20361 Medium 5.8 A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass configured ac 0.4%
• CVE-2024-20261 Medium 5.8 A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a 0.4%
• CVE-2024-20363 Medium 5.8 Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules o 0.4%
• CVE-2023-20275 Medium 4.1 A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to 0.4%
• CVE-2023-20083 High 8.6 A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the CP 0.9%
• CVE-2023-20267 Medium 4.0 A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions. This vulnerability exists because the configuratio 0.6%
• CVE-2023-20247 Medium 5.0 A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker 0.4%
• CVE-2023-20095 High 8.6 A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker t 0.9%
• CVE-2023-20246 Medium 5.8 Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. 0.7%
• CVE-2023-20063 High 8.2 Cisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center Code Injection Vulnerability 0.5%
• CVE-2023-20042 Medium 6.8 A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker 0.9%
• CVE-2023-20264 Medium 6.1 A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepowe 0.5%
• CVE-2023-20070 Medium 4.0 A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly 0.7%
• CVE-2023-20071 Medium 5.8 Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This 0.7%
• CVE-2023-20031 Medium 4.0 A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause 0.4%
• CVE-2023-20245 Medium 5.8 Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote a 0.6%
• CVE-2023-20256 Medium 5.0 Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote a 0.6%
• CVE-2023-20270 Medium 5.8 A vulnerability in the interaction between the Server Message Block (SMB) protocol preprocessor and the Snort 3 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauth 0.9%
• CVE-2023-20244 High 8.6 A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a 1.0%
• CVE-2023-20086 High 8.6 A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a de 0.9%
• CVE-2023-20177 Medium 4.0 A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category and the Snort 3 detecti 0.7%
• CVE-2023-20234 Medium 4.4 A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. 0.2%
• CVE-2023-20006 High 8.6 A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 0.9%
• CVE-2022-20940 Medium 5.3 A vulnerability in the TLS handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is du 0.7%
• CVE-2022-20943 Medium 5.8 Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the c 1.0%
• CVE-2022-20922 Medium 5.8 Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the c 0.9%
• CVE-2022-20928 Medium 5.8 A vulnerability in the authentication and authorization flows for VPN connections in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthe 0.8%
• CVE-2022-20934 Medium 6.0 A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operati 0.3%
• CVE-2022-20950 Medium 5.8 A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart 0.9%
• CVE-2022-20949 Medium 6.5 A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an 0.8%
• CVE-2022-20826 Medium 6.4 A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat Defense (FTD) Softwa 0.3%
• CVE-2022-20854 High 7.5 A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cau 0.9%
• CVE-2022-20924 High 7.7 A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authentica 0.9%
• CVE-2022-20927 High 7.7 A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a den 0.5%
• CVE-2022-20947 High 8.6 A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote at 0.9%
• CVE-2022-20946 High 8.6 A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a deni 0.9%
• CVE-2022-20713 Medium 4.3 A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote at 1.9%
• CVE-2022-20729 Medium 4.4 Cisco Firepower Threat Defense Software XML Injection Vulnerability 0.3%
• CVE-2022-20730 Medium 4.0 Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability 1.0%
• CVE-2022-20767 High 8.6 Cisco Firepower Threat Defense Software DNS Enforcement Denial of Service Vulnerability 1.7%
• CVE-2022-20757 High 8.6 Cisco Firepower Threat Defense Software Denial of Service Vulnerability 1.3%
• CVE-2022-20751 High 8.6 Cisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability 1.4%
• CVE-2022-20748 Medium 5.3 Cisco Firepower Threat Defense Software Local Malware Analysis Denial of Service Vulnerability 1.3%