FT
Product
Firepower Threat Defense Software
On CISA KEVExploited in the wild
25
CVEs
3
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 11Medium 14Low 0
Watch
Add Firepower Threat Defense Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20353 In wildKEV | 8.6 | Apr 24 | Cisco ASA and FTD Denial of Service Vulnerability Affected: 6.2.3 through 6.2.3.18; 6.6.0 through 6.6.7.1; 6.4.0 through 6.4.0.17; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.6; 7.1.0 through 7.1.0.3; +3 more |
| CVE-2024-20359 In wildKEV | 6.0 | Apr 24 | Cisco ASA and FTD Privilege Escalation Vulnerability Affected: 6.2.3 through 6.2.3.18; 6.6.0 through 6.6.7.1; 6.4.0 through 6.4.0.17; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.6; 7.1.0 through 7.1.0.3; +3 more |
| CVE-2024-20481 In wildKEV | 5.8 | Oct 23 | Cisco ASA and FTD Denial-of-Service Vulnerability Affected: 6.2.3; 6.2.3.10; 6.2.3.11; 6.2.3.12; 6.2.3.13; 6.2.3.14; +34 more |
| CVE-2024-20495 | 8.6 | Oct 23 | A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3.16; 6.2.3.17; 6.2.3.18; 6.6.0; 6.6.0.1; 6.6.1; +34 more |
| CVE-2024-20494 | 8.6 | Oct 23 | A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.3.1.2; 7.4.0; 7.4.1; +2 more |
| CVE-2024-20426 | 8.6 | Oct 23 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +15 more |
| CVE-2024-20402 | 8.6 | Oct 23 | A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.18; 6.6.0 through 6.6.7.2; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.6.2; 7.1.0 through 7.1.0.3; +2 more |
| CVE-2024-20342 | 8.6 | Oct 23 | Cisco Firepower Threat Defense Software Rate Filter Bypass Vulnerability Affected: 6.7.0 through 7.4.1.1 |
| CVE-2024-20260 | 8.6 | Oct 23 | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability Affected: 6.2.3 through 6.2.3.18; 7.4.1 through 7.4.1.1; 7.3.0 through 7.3.1.2; 7.2.0 through 7.2.8.1; 7.1.0 through 7.1.0.3; 7.0.0 through 7.0.6.2; +3 more |
| CVE-2024-20412 | 8.4 | Oct 23 | A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an… Affected: 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.7; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.1.1 |
| CVE-2024-20351 | 7.5 | Oct 23 | Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability Affected: 6.2.3 through 7.4.1.1 |
| CVE-2024-20339 | 7.5 | Oct 23 | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.17; 6.6.0 through 6.6.7.2; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.6.1; 7.1.0 through 7.1.0.3; +2 more |
| CVE-2024-20330 | 7.5 | Oct 23 | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series TCP UDP Snort 2 and Snort 2 Denial of Service Vulnerability Affected: 7.0.0 through 7.0.6.3; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.8.1; 7.3.0 through 7.3.1.2.; 7.4.1 through 7.4.2 |
| CVE-2021-34752 | 6.7 | Nov 15 | Cisco Firepower Threat Defense Command Injection Vulnerabilities Affected: before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2024-20485 | 6.7 | Oct 23 | A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20370 | 6.0 | Oct 23 | A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.8.1; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.1.1 |
| CVE-2021-1494 | 5.8 | Nov 15 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: before 6.4.0.12; 6.5.0 before 6.6.4; 6.7.0 before 6.7.0.2 |
| CVE-2024-20431 | 5.8 | Oct 23 | A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +26 more |
| CVE-2024-20407 | 5.8 | Oct 23 | A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.18; 6.6.0 through 6.6.7.2; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.6.2; 7.1.0 through 7.1.0.3; +3 more |
| CVE-2024-20384 | 5.8 | Oct 23 | A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 7.0.0 through 7.0.6.2; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.8.1; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.2 |
| CVE-2024-20299 | 5.8 | Oct 23 | Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability Affected: 6.2.3 through 6.7.0.3; 7.0.0 through 7.3.1.2 |
| CVE-2024-20297 | 5.8 | Oct 23 | Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.18; 6.6.0 through 6.6.7.2; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.6.1; 7.1.0 through 7.1.0.3; +2 more |
| CVE-2021-34753 | 5.3 | Nov 15 | Cisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities Affected: before 6.4.0.13; 6.5.0 before 6.6.5.1; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2024-20493 | 5.3 | Oct 23 | A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20388 | 5.3 | Oct 23 | A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on… Affected: 6.4.0.4 through 6.4.0.18; 6.6.5.1 through 6.6.7; 6.7.0.2; 7.1.0.1 through 7.1.0.3; 7.2.2; 7.4.1 |
Showing 25