Cisco Firepower Threat Defense Software vulnerabilities

4 CVEs affecting Cisco Firepower Threat Defense Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34752, published 2024-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1494, published 2024-11-15. Medium severity, CVSS 5.8. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The…
CVE-2024-20260, published 2024-10-23. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv)…
CVE-2021-34752, published 2024-11-15. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco FTD Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands with root privileges on the underlying…
CVE-2024-20370, published 2024-10-23. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…