An unauthenticated attacker can crash a Firepower 2100 Series firewall by sending IPv6 packets over an established IPsec VPN tunnel, forcing a device reload and cutting off VPN and firewall service.
Posts tagged: Cisco
Cisco Secure Firewall Threat Defense Software Snort 3 Denial of Service Vulnerability
Crafted traffic sent through an FTD device running Snort 3 with an intrusion policy enabled can trap the inspection engine in an infinite loop, forcing a watchdog restart and a temporary inspection outage.
Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability
A URL-parsing flaw in FTD’s new geolocation RA VPN feature lets an unauthenticated attacker craft HTTP traffic that slips past country-based allow/deny rules undetected.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series TLS 1.3 Cipher Denial of Service Vulnerability
A specific TLS 1.3 cipher on Firepower 3100/4200 ASA and FTD devices lets an authenticated remote user exhaust connection-handling resources, knocking out all encrypted traffic until the box is rebooted.
Cisco Catalyst Center Unauthenticated API Access Vulnerability
An unauthenticated API endpoint in Cisco Catalyst Center lets remote attackers read or rewrite the outgoing proxy configuration, potentially rerouting or intercepting outbound traffic.
Cisco Webex Meeting Client Join Certificate Validation Vulnerability
A certificate-checking gap in Webex Meetings’ join process let a nearby network attacker hijack another user’s meeting-join attempt; Cisco has already fixed it server-side.
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities
Authenticated users of Cisco ISE and ISE-PIC can inject stored scripts or bypass permission checks to alter device configuration, with no workaround available until patched.
Cisco Catalyst Center Insufficient Access Control Vulnerability
An access-control gap in Cisco Catalyst Center lets an already-authenticated user reach an internal service’s repository and read or modify its data, but only where Disaster Recovery is switched on.
Cisco Catalyst SD-WAN Manager Arbitrary File Creation Vulnerability
An authenticated user with only low-level access to Cisco Catalyst SD-WAN Manager can abuse a flawed API to write files anywhere on the underlying system via directory traversal.
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
A low-privilege, read-only CLI user on Cisco Catalyst SD-WAN Manager can overwrite arbitrary files and escalate straight to root, with no workaround available other than upgrading.