sourcefire defense center vulnerabilities and exploits

(subscribe to this query)

The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor prior to 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an edit action to admin/user/user.cgi and unspecified other components.

Sourcefire 3d Sensor 4.8 Sourcefire 3d Sensor 4.8.0.4 Sourcefire Defense Center 4.8 Sourcefire Defense Center 4.8.0.3 Sourcefire Defense Center Sourcefire 3d Sensor 4.8.0.3 Sourcefire Defense Center 4.8.0.4 Sourcefire 3d Sensor

1 EDB exploit

A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote malicious user to cause the detection engine to consume excessive system memory on an affected devic...

Cisco Firepower Management Center 6.1.0 Cisco Firepower Management Center 6.2.0 Cisco Firepower Management Center 6.2.1 Cisco Firepower Management Center 5.4.0 Cisco Firepower Management Center 6.0.0

Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local malicious user to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.

Cisco Firepower Management Center Virtual Appliance 6.1.0 Cisco Firepower Management Center Virtual Appliance 6.2.0 Cisco Firepower Management Center Virtual Appliance 6.2.3 Cisco Sourcefire Defense Center 6.4.0 Cisco Sourcefire Defense Center 6.5.0 Cisco Sourcefire Defense Center 6.6.0 Cisco Firepower Threat Defense Cisco Firepower Management Center Virtual Appliance 6.3.0 Cisco Sourcefire Defense Center 6.1.0 Cisco Sourcefire Defense Center 6.2.0 Cisco Sourcefire Defense Center 6.2.3 Cisco Sourcefire Defense Center 6.3.0 Cisco Sourcefire Defense Center 7.1.0 Cisco Firepower Management Center Virtual Appliance 7.1.0 Cisco Sourcefire Defense Center 6.4.0.11 Cisco Sourcefire Defense Center 6.6.1 Cisco Sourcefire Defense Center 6.7.0 Cisco Sourcefire Defense Center 7.0.0 Cisco Firepower Management Center Virtual Appliance 6.4.0 Cisco Firepower Management Center Virtual Appliance 6.4.0.11 Cisco Firepower Management Center Virtual Appliance 6.5.0 Cisco Firepower Management Center Virtual Appliance 6.6.0

Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local malicious user to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.

Cisco Firepower Management Center Virtual Appliance 6.1.0 Cisco Firepower Management Center Virtual Appliance 6.2.0 Cisco Firepower Management Center Virtual Appliance 6.2.3 Cisco Sourcefire Defense Center 6.4.0 Cisco Sourcefire Defense Center 6.5.0 Cisco Sourcefire Defense Center 6.6.0 Cisco Firepower Threat Defense Cisco Firepower Management Center Virtual Appliance 6.3.0 Cisco Sourcefire Defense Center 6.1.0 Cisco Sourcefire Defense Center 6.2.0 Cisco Sourcefire Defense Center 6.2.3 Cisco Sourcefire Defense Center 6.3.0 Cisco Sourcefire Defense Center 7.1.0 Cisco Firepower Management Center Virtual Appliance 7.1.0 Cisco Sourcefire Defense Center 6.4.0.11 Cisco Sourcefire Defense Center 6.6.1 Cisco Sourcefire Defense Center 6.7.0 Cisco Sourcefire Defense Center 7.0.0 Cisco Firepower Management Center Virtual Appliance 6.4.0 Cisco Firepower Management Center Virtual Appliance 6.4.0.11 Cisco Firepower Management Center Virtual Appliance 6.5.0 Cisco Firepower Management Center Virtual Appliance 6.6.0

A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Firepower Threat Defense (FTD) sensors could allow an authenticated, local malicious user to execute specific CLI commands with root privileges on the Cisco Firep...

Cisco Firepower Threat Defense 6.0.1 Cisco Firepower Threat Defense 6.2.0 Cisco Firepower Threat Defense 6.2.1 Cisco Firepower Threat Defense 6.2.2 Cisco Firepower Threat Defense 6.0.0 Cisco Firepower Threat Defense 6.1.0 Cisco Firepower Threat Defense 5.4.0

A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on the affected device. This vulnerability is du...

Cisco Sourcefire Defense Center 6.4.0 Cisco Sourcefire Defense Center 6.5.0 Cisco Sourcefire Defense Center 6.6.0 Cisco Firepower Threat Defense Cisco Firepower Management Center Virtual Appliance 6.3.0 Cisco Sourcefire Defense Center 6.3.0 Cisco Sourcefire Defense Center 7.0.0 Cisco Firepower Management Center Virtual Appliance 6.4.0 Cisco Firepower Management Center Virtual Appliance 6.5.0 Cisco Firepower Management Center Virtual Appliance 6.6.0 Cisco Firepower Management Center Virtual Appliance 7.0.0 Cisco Sourcefire Defense Center 6.7.0.3 Cisco Sourcefire Defense Center 6.4.0.13 Cisco Sourcefire Defense Center 6.7.1 Cisco Firepower Management Center Virtual Appliance 6.7.0.3 Cisco Firepower Management Center Virtual Appliance 6.4.0.13 Cisco Firepower Management Center Virtual Appliance 6.7.1

A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local malicious user to overwrite or append arbitrary data to system files using root-level privileges. The attacker must have administrative credentials on the device. This vulnerabili...

Cisco Firepower Management Center Virtual Appliance 6.2.3 Cisco Sourcefire Defense Center 6.4.0 Cisco Firepower Threat Defense Cisco Sourcefire Defense Center 6.2.3 Cisco Sourcefire Defense Center 7.1.0 Cisco Firepower Management Center Virtual Appliance 7.1.0 Cisco Sourcefire Defense Center 6.6.1 Cisco Sourcefire Defense Center 6.7.0 Cisco Sourcefire Defense Center 7.0.0 Cisco Firepower Management Center Virtual Appliance 6.4.0 Cisco Firepower Management Center Virtual Appliance 6.6.1 Cisco Firepower Management Center Virtual Appliance 6.7.0 Cisco Firepower Management Center Virtual Appliance 7.0.0

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an malicious user to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information about these vulnerabilities, see the De...

Cisco Firepower Management Center Virtual Appliance 6.1.0 Cisco Firepower Management Center Virtual Appliance 6.2.0 Cisco Firepower Management Center Virtual Appliance 6.2.3 Cisco Sourcefire Defense Center 6.4.0 Cisco Sourcefire Defense Center 6.5.0 Cisco Sourcefire Defense Center 6.6.0 Cisco Firepower Threat Defense Cisco Firepower Management Center Virtual Appliance 6.3.0 Cisco Sourcefire Defense Center 6.1.0 Cisco Sourcefire Defense Center 6.2.0 Cisco Sourcefire Defense Center 6.2.3 Cisco Sourcefire Defense Center 6.3.0 Cisco Sourcefire Defense Center 7.1.0 Cisco Firepower Management Center Virtual Appliance 7.1.0 Cisco Sourcefire Defense Center 6.6.1 Cisco Sourcefire Defense Center 6.7.0 Cisco Sourcefire Defense Center 7.0.0 Cisco Firepower Management Center Virtual Appliance 6.4.0 Cisco Firepower Management Center Virtual Appliance 6.5.0 Cisco Firepower Management Center Virtual Appliance 6.6.0 Cisco Firepower Management Center Virtual Appliance 6.6.1 Cisco Firepower Management Center Virtual Appliance 6.7.0

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote malicious user to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vu...

Cisco Firepower Management Center Virtual Appliance 6.2.3 Cisco Sourcefire Defense Center 6.4.0 Cisco Sourcefire Defense Center 6.5.0 Cisco Firepower Threat Defense Cisco Sourcefire Defense Center 6.2.3 Cisco Firepower Management Center Virtual Appliance 7.1.0 Cisco Sourcefire Defense Center 6.6.1 Cisco Sourcefire Defense Center 7.0.0 Cisco Firepower Management Center Virtual Appliance 6.4.0 Cisco Firepower Management Center Virtual Appliance 6.5.0 Cisco Firepower Management Center Virtual Appliance 6.6.1 Cisco Firepower Management Center Virtual Appliance 6.7.0 Cisco Firepower Management Center Virtual Appliance 7.0.0 Cisco Firepower Management Center Virtual Appliance 6.6.2 Cisco Firepower Management Center Virtual Appliance 6.6.3 Cisco Firepower Management Center Virtual Appliance 6.6.4 Cisco Sourcefire Defense Center 6.6.2 Cisco Sourcefire Defense Center 6.6.3 Cisco Sourcefire Defense Center 6.6.4

A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition due to the Snort process unexpectedly resta...

Cisco Firepower Management Center 6.0.0.0 Cisco Firepower Management Center 6.0.0 Cisco Firepower Management Center 6.0.0.1 Cisco Firepower Management Center 6.0.1

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook