Cisco Firepower 9000 Firmware vulnerabilities

7 CVEs affecting Cisco Firepower 9000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1649, published 2019-05-13.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-0304, published 2018-06-20. Critical severity, CVSS 9.8. EPSS: 8.6% chance of exploitation in the next 30 days. A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to read sensitive memory content, create a…
• CVE-2018-0314, published 2018-06-20. Critical severity, CVSS 9.8. EPSS: 5.9% chance of exploitation in the next 30 days. A vulnerability in the Cisco Fabric Services (CFS) component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected…
• CVE-2018-0312, published 2018-06-20. Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days. A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of…
• CVE-2018-0308, published 2018-06-20. Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days. A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of…
• CVE-2018-0305, published 2018-06-21. High severity, CVSS 8.6. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on…
• CVE-2019-1649, published 2019-05-13. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a…
• CVE-2019-1700, published 2019-02-21. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in field-programmable gate array (FPGA) ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module (PID:…