Cisco Firepower Extensible Operating System vulnerabilities

56 CVEs affecting Cisco Firepower Extensible Operating System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20294, published 2024-02-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-6435, published 2016-01-22. Critical severity, CVSS 9.8. EPSS: 8.7% chance of exploitation in the next 30 days. An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows…
CVE-2017-3883, published 2017-10-19. High severity, CVSS 8.6. EPSS: 4.5% chance of exploitation in the next 30 days. A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an…
CVE-2018-0310, published 2018-06-21. Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days. A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or…
CVE-2017-12277, published 2017-11-02. High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote…
CVE-2022-20625, published 2022-02-23. Medium severity, CVSS 4.3. EPSS: 3.3% chance of exploitation in the next 30 days. A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in…
CVE-2018-0311, published 2018-06-21. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on…
CVE-2019-1598, published 2019-03-07. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote…
CVE-2019-1597, published 2019-03-07. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote…
CVE-2019-1858, published 2019-05-16. High severity, CVSS 8.6. EPSS: 2.4% chance of exploitation in the next 30 days. A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the…
CVE-2018-0298, published 2018-06-21. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. The…

Latest

CVE-2024-20294, published 2024-02-29. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service…
CVE-2023-20234, published 2023-08-23. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system…
CVE-2023-20015, published 2023-02-23. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated,…
CVE-2022-20934, published 2022-11-15. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying…
CVE-2021-34714, published 2021-09-23. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an…
CVE-2021-1368, published 2021-02-24. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with…
CVE-2020-3459, published 2020-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to…
CVE-2020-3457, published 2020-10-21. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to…
CVE-2020-3456, published 2020-10-21. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a…