cisco industrial security appliances 3000 firmware vulnerabilities and exploits

(subscribe to this query)

Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user to trigger a reload of an affected device, res...

Cisco Firepower Threat Defense Cisco Adaptive Security Appliance Software

Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote malicious user to bypass a configured file policy for HTTP. The vulnerability is due to incorrect ...

Cisco Firepower Threat Defense Cisco Secure Firewall Management Center 2.9.14.0 Cisco Secure Firewall Management Center 2.9.15 Cisco Secure Firewall Management Center 2.9.16 Cisco Secure Firewall Management Center 2.9.17 Cisco Secure Firewall Management Center 2.9.18 Cisco Secure Firewall Management Center 3.0.1 Cisco Ios Xe Snort Snort Cisco Meraki Mx64 Firmware -Cisco Meraki Mx64w Firmware -Cisco Meraki Mx67 Firmware -

A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine could allow an unauthenticated, remote malicious user to bypass filtering technology on an affected de...

Cisco Ironport Web Security Appliance 14.5 Cisco Secure Firewall Management Center 2.9.18 Cisco Firepower Management Center Virtual Appliance Firmware 6.6.0 Cisco Firepower Management Center Virtual Appliance Firmware 6.7.0 Cisco Firepower Management Center Virtual Appliance Firmware 7.0.0 Cisco Firepower Management Center Virtual Appliance Firmware 7.1.0

A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security Appliance (ASA) Software, and Cisco Firepower Threat Defense (FTD) Sof...

Cisco Anyconnect Secure Mobility Client 4.6(200)Cisco Adaptive Security Appliance Software 9.8(1.245)

1 Article

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...

Openssl Openssl Debian Debian Linux 9.0 Debian Debian Linux 10.0 Freebsd Freebsd 12.2 Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Ontap Select Deploy Administration Utility -Netapp Santricity Smi-s Provider -Netapp Snapcenter -

4 Github repositories1 Article

A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local malicious user to write a modified firmware image to the component. This vulnerability affects mul...

Cisco Asa 5500 Firmware Cisco Firepower 2100 Firmware Cisco Firepower 4000 Firmware Cisco Firepower 9000 Firmware Cisco Ons 15454 Mstp Firmware Cisco Analog Voice Network Interface Modules Firmware Cisco Integrated Services Router T1/e1 Voice And Wan Network Interface Modules Firmware Cisco Supervisor A+ Firmware Cisco Supervisor B+ Firmware Cisco 15454-m-wse-k9 Firmware Cisco Ios Xe Cisco Ios

2 Articles

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...

Openssl Openssl Freebsd Freebsd 12.2 Netapp Santricity Smi-s Provider Firmware -Netapp Storagegrid Firmware -Windriver Linux -Windriver Linux 17.0 Windriver Linux 18.0 Windriver Linux 19.0 Netapp Cloud Volumes Ontap Mediator -Netapp Oncommand Workflow Automation -Netapp Ontap Select Deploy Administration Utility -Netapp Storagegrid -

1 Github repository1 Article

Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL prior to 0.9.8zf, 1.0.0 prior to 1.0.0r, 1.0.1 prior to 1.0.1m, and 1.0.2 prior to 1.0.2a might allow remote malicious users to cause a denial of service (memory corruption and applica...

Openssl Openssl Openssl Openssl 1.0.0 Openssl Openssl 1.0.0a Openssl Openssl 1.0.0b Openssl Openssl 1.0.0c Openssl Openssl 1.0.0d Openssl Openssl 1.0.0e Openssl Openssl 1.0.0f Openssl Openssl 1.0.0g Openssl Openssl 1.0.0h Openssl Openssl 1.0.0i Openssl Openssl 1.0.0j

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook