Crafted DNS packets that hit a static NAT rule with DNS inspection enabled can trigger a certificate-parsing bug in ASA and FTD software, forcing an unauthenticated reload of the firewall.
Posts tagged: Cisco
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities
Two unauthenticated denial-of-service flaws in the VPN and management web servers of Cisco ASA and FTD firewalls let a crafted request or HTTP packet freeze VPN authentication or reload the device outright.
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability
An authenticated VPN user can crash an ASA or FTD firewall’s remote access SSL VPN web server with a malformed HTTP header, forcing an unplanned reload with no workaround available.
Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerabilities
Low-privileged users on a multi-domain Cisco FMC deployment can pull troubleshoot files and generated reports belonging to other domains, breaking the confidentiality boundary between tenants.
Cisco Secure Firewall Management Center Software Command Injection Vulnerability
An admin-authenticated command injection in Cisco FMC’s web interface lets a logged-in administrator break out of lockdown mode restrictions to run root commands on the underlying OS.
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software Command Injection Vulnerability
A CLI input-validation flaw lets an already-authenticated FMC or FTD Administrator break out of a locked-down command prompt into full root access on the underlying OS.
Cisco Secure Firewall Management Center Software HTML Injection Vulnerability
A low-privilege, read-only FMC analyst account can inject HTML into device-generated documents, enabling arbitrary file reads from the underlying OS and SSRF against other reachable systems.
Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability
An unauthenticated attacker can smuggle shell commands through the login fields on Cisco Secure Firewall Management Center whenever RADIUS authentication is switched on, gaining high-privilege code execution.
Cisco Secure Firewall Management Center Software XPATH Injection Vulnerability
An XPATH injection flaw in Cisco FMC’s web management interface lets an already-authenticated admin pull sensitive data off the device, but only when lockdown mode is switched on.
Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability
An unauthenticated attacker who lures an FMC administrator into clicking crafted content can run script in that admin’s browser session inside the management interface, exposing session data.