FE
Product
Firepower Extensible Operating System
56
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 21Medium 23Low 1
Watch
Add Firepower Extensible Operating System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0310 | 9.8 | Jun 21 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive… Affected: 1.1 before 1.1.4.179; 2.0 before 2.0.1.153; 2.1.1 before 2.1.1.86; 2.2.1 before 2.2.1.70; 2.2.2 before 2.2.2.17; 1.1 before 1.1.4.179; +4 more |
| CVE-2015-6435 | 9.8 | Jan 22 | An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0… Affected: 1.1(1.86); 1.1(1.160); 1.1.1 |
| CVE-2021-1368 | 8.8 | Feb 24 | A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute… Affected: r231 |
| CVE-2020-3456 | 8.8 | Oct 21 | A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)… Affected: 2.4(1.249) |
| CVE-2020-3172 | 8.8 | Feb 26 | A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code… Affected: before 2.6.1.187; 2.7 before 2.7.1.106 |
| CVE-2018-0303 | 8.8 | Jun 21 | A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary… Affected: 1.1 before 1.1.4.179; 2.0 before 2.0.1.153; 2.1.1 before 2.1.1.86; 2.2.1 before 2.2.1.70; 2.2.2 before 2.2.2.17; 1.1 before 1.1.4.179; +4 more |
| CVE-2017-12277 | 8.8 | Nov 2 | A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an… Affected: through 1.1.3; 1.1.4; 2.0.1 |
| CVE-2020-3517 | 8.6 | Aug 27 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which… Affected: 1.1 before 1.1.4.179; 2.0 before 2.0.1.153; 2.1 before 2.1.1.86; 2.2 before 2.2.1.70 |
| CVE-2019-1858 | 8.6 | May 16 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote… Affected: 2.6 before 2.6.1.131 |
| CVE-2017-3883 | 8.6 | Oct 19 | A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could… Affected: through 2.3 |
| CVE-2020-3459 | 7.8 | Oct 21 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges Affected: before 2.4.1.266; 2.6 before 2.6.1.204; 2.7 before 2.7.1.131; 2.8 before 2.8.1.125 |
| CVE-2020-3455 | 7.8 | Oct 21 | A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms Affected: before 2.4.1.268; 2.6 before 2.6.1.214; 2.7 before 2.7.1.131 |
| CVE-2020-3167 | 7.8 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying… Affected: before 2.4.1.234 |
| CVE-2019-12699 | 7.8 | Oct 2 | Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on… Affected: 2.0 before 2.2.2.101; 2.3 before 2.3.1.155; 2.4 before 2.4.1.238 |
| CVE-2018-0302 | 7.8 | Jun 21 | A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an… Affected: 1.1 before 1.1.4.169; 2.0 before 2.0.1.135; 1.1 before 1.1.4.169; 2.0 before 2.0.1.135 |
| CVE-2017-6600 | 7.8 | Apr 7 | A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security… Affected: 2.0(1.68) |
| CVE-2017-6597 | 7.8 | Apr 7 | A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower… Affected: 2.0(1.68) |
| CVE-2019-1598 | 7.5 | Mar 7 | Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities Affected: 2.3 before 2.3.1.75; 2.1 before 2.2.2.54; before 2.0.1.201 |
| CVE-2019-1597 | 7.5 | Mar 7 | Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities Affected: after 2.2.2.54 before 2.3.1.75; after 2.0.1.201 before 2.2.2.54; before 2.0.1.201 |
| CVE-2018-0311 | 7.5 | Jun 21 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service… Affected: 1.1 before 1.1.4.179; 2.0 before 2.0.1.153; 2.1.1 before 2.1.1.86; 2.2.1 before 2.2.1.70; 2.2.2 before 2.2.2.17; 1.1 before 1.1.4.179; +4 more |
| CVE-2018-0298 | 7.5 | Jun 21 | A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected… Affected: 1.1 before 1.1.4.169; 2.0 before 2.0.1.135; 1.1 before 1.1.4.179; 2.0 before 2.0.1.153 |
| CVE-2021-34714 | 7.4 | Sep 23 | A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS… Affected: through 8.4\(3.115\); through 7.0\(3\)i7\(9\); through 7.3\(8\)n1\(1\); through 3.2\(3o\)a; through 4.1\(1a\)a |
| CVE-2017-6601 | 7.1 | Apr 7 | A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security… Affected: 2.0(1.68) |
| CVE-2023-20015 | 6.7 | Feb 23 | A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could… Affected: All versions, or not specified |
| CVE-2022-20934 | 6.7 | Nov 15 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on… Affected: 1.1.1.147; 1.1.1.160; 1.1.2.51; 1.1.2.178; 1.1.3.84; 1.1.3.86; +34 more |
| CVE-2020-3457 | 6.7 | Oct 21 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges Affected: 2.4 before 2.4.1.266; 2.6 before 2.6.1.204; 2.7 before 2.7.1.131; 2.8 before 2.8.1.125 |
| CVE-2020-3545 | 6.7 | Sep 4 | A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition Affected: through 2.3.1.58 |
| CVE-2020-3169 | 6.7 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a… Affected: 2.2 before 2.2.2.97; 2.3 before 2.3.1.144; 2.4 before 2.4.1.234 |
| CVE-2020-3166 | 6.7 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS) Affected: before 2.2.2.97; 2.3 before 2.3.1.155; 2.4 before 2.4.1.238; 2.6 before 2.6.1.157 |
| CVE-2019-1780 | 6.7 | May 16 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary… Affected: before 2.3.1.130; 2.4 before 2.4.1.122 |
| CVE-2019-1795 | 6.7 | May 15 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux… Affected: before 2.0.1.201; 2.1 before 2.2.2.54; 2.3 before 2.3.1.73; 2.4 before 2.4.1.101 |
| CVE-2019-1779 | 6.7 | May 15 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating… Affected: before 2.4.1.101 |
| CVE-2018-0294 | 6.7 | Jun 20 | A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator… Affected: 2.1.1 before 2.1.1.86; 2.2 before 2.2.2.17; 2.1.1 before 2.1.1.86; 2.2 before 2.2.2.17 |
| CVE-2017-6598 | 6.7 | Apr 7 | A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco… Affected: 2.0(1.68) |
| CVE-2024-20294 | 6.6 | Feb 29 | A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a… Affected: 2.2.1.63; 2.2.1.66; 2.2.1.70; 2.2.2.17; 2.2.2.19; 2.2.2.24; +34 more |
| CVE-2020-3120 | 6.5 | Feb 5 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent… Affected: through 2.3.1.173; 2.6 before 2.6.1.187; 2.7 before 2.7.1.106 |
| CVE-2019-12700 | 6.5 | Oct 2 | A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower Management Center (FMC)… Affected: through 2.2; 2.3 before 2.3.1.155; 2.4 before 2.6.1.131 |
| CVE-2018-0331 | 6.5 | Jun 21 | A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an… Affected: 1.1 before 2.0.1.153; 2.1.1 before 2.1.1.86; 2.2.1 before 2.2.1.70; 2.1.1 before 2.1.1.86; 2.2.1 before 2.2.1.70 |
| CVE-2017-12329 | 6.3 | Nov 30 | A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, local attacker to perform a command… Affected: All versions, or not specified |
| CVE-2023-20234 | 6.0 | Aug 23 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device,… Affected: All versions, or not specified |
| CVE-2019-1734 | 5.5 | Nov 5 | A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to view sensitive… Affected: before 2.2.2.91; 2.3 before 2.3.1.111; 2.4 before 2.4.1.101 |
| CVE-2018-0395 | 5.3 | Oct 17 | A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to… Affected: r231 |
| CVE-2017-12299 | 5.3 | Nov 16 | A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an… Affected: 2.2(1.58) |
| CVE-2019-1600 | 4.4 | Mar 7 | Cisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability Affected: 1.1 before 2.2.2.91; 2.3 before 2.3.1.110 |
| CVE-2017-6602 | 4.4 | Apr 7 | A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security… Affected: 2.0(1.68) |
| CVE-2022-20625 | 4.3 | Feb 23 | A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to… Affected: before 2.3.1.219; 2.4 before 2.9.1.158; 2.10 before 2.10.1.179 |
| CVE-2020-3504 | 3.3 | Aug 27 | A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on… Affected: All versions, or not specified |
| CVE-2015-6380 | – | Nov 24 | An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to execute… Affected: 1.1(1.160) |
| CVE-2015-6374 | – | Nov 19 | The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it easier for… Affected: 1.1(1.160) |
| CVE-2015-6371 | – | Nov 19 | Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to read arbitrary files via crafted parameters to unspecified… Affected: 1.1(1.160) |