Cisco Firepower vulnerabilities

4 CVEs affecting Cisco Firepower, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-12697, published 2019-10-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-12697, published 2019-10-02. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file…
CVE-2019-12696, published 2019-10-02. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file…
CVE-2018-0272, published 2018-04-19. Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The…
CVE-2015-6307, published 2015-09-28. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cisco FirePOWER (formerly Sourcefire) 7000 and 8000 devices with software 5.4.0.1 allow remote attackers to cause a denial of service (inspection-engine outage) via crafted packets, aka Bug ID…