Cisco Firepower Threat Defense vulnerabilities

9 CVEs affecting Cisco Firepower Threat Defense, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3585, published 2020-10-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0296: Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability, published 2018-06-07. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 99.9% chance of exploitation in the next 30 days. A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a…
CVE-2018-15383, published 2018-10-05. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,…
CVE-2017-6632, published 2017-05-22. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a…
CVE-2020-3585, published 2020-10-21. Low severity, CVSS 3.7. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000 Series firewalls could allow an…
CVE-2020-3578, published 2020-10-21. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to…
CVE-2020-3582, published 2020-10-21. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote…
CVE-2020-3581, published 2020-10-21. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote…
CVE-2020-3583, published 2020-10-21. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote…
CVE-2020-3457, published 2020-10-21. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to…