Posts for: #6.4.0.1

Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: CRITICAL — CVSS 9.9 Security Advisory

TL;DR 📌

A critical remote code execution vulnerability has been identified in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software. This flaw allows authenticated attackers to execute arbitrary code on affected devices. Immediate software updates are recommended, as there are no workarounds available.

What happened 🕵️‍♂️

A vulnerability (CVE-2025-20333) has been discovered in the VPN web server of Cisco Secure Firewall ASA and FTD Software. This issue arises from improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN credentials could exploit this vulnerability by sending crafted HTTP requests, potentially leading to arbitrary code execution as root. This could result in a complete compromise of the affected device.

[]

Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Unauthorized Access Vulnerability

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: MEDIUM — CVSS 6.5 Security Advisory

TL;DR 📌

A medium-severity vulnerability has been identified in the VPN web server of Cisco Secure Firewall ASA and FTD Software, allowing unauthenticated remote access to restricted URLs. No workarounds are available, and users are strongly advised to upgrade to fixed software releases.

What happened 🕵️‍♂️

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated remote attacker to access restricted URL endpoints without authentication. This issue arises from improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server, potentially gaining access to restricted URLs.

[]

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Web Services Denial of Service Vulnerability

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: HIGH — CVSS 8.6 Security Advisory

TL;DR 📌

A buffer overflow vulnerability has been identified in the web services interface of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Software. This vulnerability allows unauthenticated remote attackers to cause a denial of service (DoS) condition. Cisco has released software updates to address this issue, and there are no workarounds available.

What happened 🕵️‍♂️

A vulnerability in the web services interface of Cisco Secure Firewall ASA and FTD Software could allow an unauthenticated, remote attacker to exploit a buffer overflow condition. This occurs due to insufficient boundary checks for specific data provided to the web services interface. An attacker could send a crafted HTTP request to the affected system, leading to a system reload and resulting in a denial of service (DoS).

[]

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Authenticated Command Injection Vulnerabilities

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: MEDIUM — CVSS 6.0 Security Advisory

TL;DR 📌

Cisco has identified multiple authenticated command injection vulnerabilities in the Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Software. These vulnerabilities could allow an authenticated local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. The highest CVSS score is 6.0, indicating a medium severity risk. Software updates are available to address these vulnerabilities, but there are no workarounds.

[]

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software DHCP Denial of Service Vulnerability

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: MEDIUM — CVSS 4.3 Security Advisory

TL;DR 📌

A medium-severity vulnerability has been identified in the DHCP client functionality of Cisco Secure Firewall ASA and FTD Software. This flaw could allow an unauthenticated adjacent attacker to exhaust device memory, leading to a Denial of Service (DoS) condition. Cisco has released software updates to mitigate this risk, but no workarounds are available.

What happened 🕵️‍♂️

A vulnerability in the DHCP client functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software has been discovered. This issue arises from improper validation of incoming DHCP packets, allowing an attacker to send crafted DHCPv4 packets to the device. If exploited, the attacker could exhaust the device’s available memory, resulting in service unavailability and requiring a manual reboot to restore functionality.

[]

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Server Denial of Service Vulnerability

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: HIGH — CVSS 8.5 Security Advisory

TL;DR 📌

A high-severity vulnerability has been identified in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Software. This flaw could allow an authenticated attacker to create or delete files on the underlying operating system, potentially leading to a denial of service (DoS) condition. Cisco has released software updates to address this issue, and there are no available workarounds.

[]

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: HIGH — CVSS 8.6 Security Advisory

TL;DR 📌

A high-severity vulnerability has been identified in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Software, specifically affecting the Network Address Translation (NAT) DNS inspection feature. An unauthenticated remote attacker could exploit this vulnerability to cause a denial of service (DoS) condition by sending crafted DNS packets. Cisco has released software updates to address this issue, but no workarounds are available.

[]

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: HIGH — CVSS 8.6 Security Advisory

TL;DR 📌

Multiple vulnerabilities have been identified in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Software, allowing unauthenticated remote attackers to cause denial of service (DoS) conditions. Cisco has released software updates to address these vulnerabilities, but there are no workarounds available.

What happened 🕵️‍♂️

Cisco has disclosed vulnerabilities in the management and VPN web servers of its Secure Firewall ASA and FTD Software. These vulnerabilities stem from improper validation of user-supplied input, enabling attackers to send crafted HTTP requests that could lead to the device becoming unresponsive or unexpectedly reloading, resulting in a denial of service (DoS) condition.

[]

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: HIGH — CVSS 7.7 Security Advisory

TL;DR 📌

A denial of service (DoS) vulnerability has been identified in the Remote Access SSL VPN service for Cisco Secure Firewall ASA and FTD Software. This flaw could allow an authenticated attacker to cause the device to reload unexpectedly. Cisco has released updates to address this issue, but no workarounds are available.

What happened 🕵️‍♂️

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software has been discovered. This vulnerability arises from incomplete error checking when parsing an HTTP header field value. An authenticated attacker could exploit this by sending a crafted HTTP request, leading to an unexpected device reload and resulting in a denial of service (DoS) condition.

[]

Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerabilities

#6.2  #6.2.3  #6.2.3.1  #6.2.3.10  #6.2.3.11  #6.2.3.12  #6.2.3.13  #6.2.3.14  #6.2.3.15  #6.2.3.16  #6.2.3.17  #6.2.3.18  #6.2.3.2  #6.2.3.3  #6.2.3.4  #6.2.3.5 
🚨 SEVERITY: MEDIUM — CVSS 6.5 Security Advisory

TL;DR 📌

Multiple vulnerabilities have been identified in the Cisco Secure Firewall Management Center (FMC) Software that could allow authenticated, low-privileged remote attackers to access unauthorized files. The highest CVSS score for these vulnerabilities is 6.5, indicating a medium level of risk. Software updates are available to address these issues, but there are no workarounds.

What happened 🕵️‍♂️

Cisco has disclosed multiple vulnerabilities in the web-based management interface of the Cisco Secure Firewall Management Center (FMC) Software. These vulnerabilities could allow an authenticated, low-privileged remote attacker to access files they are not authorized to view, including troubleshoot files and generated reports from different domains managed on the same FMC instance. The vulnerabilities stem from missing authorization checks.

[]