SF
Product
Secure Firewall Threat Defense
On CISA KEVExploited in the wildRansomware-linked
274
CVEs
11
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 138Medium 130Low 1
Watch
Add Secure Firewall Threat Defense to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-15388 | 8.6 | May 3 | A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.2.3.12 |
| CVE-2019-1669 | 8.6 | Jan 24 | Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability Affected: 6.3.0; 6.4.0 |
| CVE-2018-15454 | 8.6 | Nov 1 | A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 6.1.0 before 6.1.0.7; 6.2.0 before 6.2.0.6; 6.2.2 before 6.2.2.4; 6.2.3 before 6.2.3.7 |
| CVE-2018-0240 | 8.6 | Apr 19 | Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 6.1.0 through 6.1.0.7; 6.2.0 before 6.2.0.5; 6.2.1 before 6.2.2.2 |
| CVE-2018-0231 | 8.6 | Apr 19 | A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.0 before 6.1.0.6; 6.2.1 before 6.2.2.1 |
| CVE-2018-0230 | 8.6 | Apr 19 | A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Security Appliances could allow an… Affected: 6.2.1; 6.2.2 |
| CVE-2018-0228 | 8.6 | Apr 19 | A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the CPU to increase… Affected: 6.0 before 6.1.0.6; 6.2.0 before 6.2.0.5; 6.2.1 before 6.2.2.2 |
| CVE-2024-20412 | 8.4 | Oct 23 | A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an… Affected: 7.1.0; 7.1.0.1; 7.1.0.2; 7.1.0.3; 7.2.0; 7.2.0.1; +17 more |
| CVE-2023-20063 | 8.2 | Nov 1 | A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.17; 6.6.0 through 6.6.7.1; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; +1 more |
| CVE-2019-12674 | 8.2 | Oct 2 | Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for… Affected: before 6.4.0.2 |
| CVE-2018-0453 | 8.2 | Oct 5 | A vulnerability in the Sourcefire tunnel control channel protocol in Cisco Firepower System Software running on Cisco Firepower Threat Defense (FTD) sensors could allow an… Affected: 5.4.0; 6.0.0; 6.0.1; 6.1.0; 6.2.0; 6.2.1; +1 more |
| CVE-2021-34762 | 8.1 | Oct 27 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory… Affected: before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2020-3550 | 8.1 | Oct 21 | A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote… Affected: through 6.0.1; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.2.0; 6.2.1 |
| CVE-2020-3549 | 8.1 | Oct 21 | A vulnerability in the sftunnel functionality of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.6.1 |
| CVE-2022-20729 | 7.8 | May 3 | A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject XML into the command parser Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2 |
| CVE-2021-34756 | 7.8 | Oct 27 | Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root… Affected: 6.4.0 before 6.4.0.13; 6.6.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-34755 | 7.8 | Oct 27 | Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root… Affected: 6.4.0 before 6.4.0.13; 6.6.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-1448 | 7.8 | Apr 29 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges on the… Affected: 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.1 |
| CVE-2020-3167 | 7.8 | Feb 26 | A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying… Affected: 6.2.2 before 6.2.3.13; 6.3.0 before 6.4.0.8; 6.5.0 before 6.5.0.2 |
| CVE-2019-12699 | 7.8 | Oct 2 | Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on… Affected: through 6.1.0; 6.2.0 before 6.2.3.14; 6.3.0 before 6.3.0.3 |
| CVE-2019-1709 | 7.8 | May 3 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack Affected: 6.0.0; 6.0.1; 6.1.0; 6.2.0; 6.2.1; 6.2.2; +1 more |
| CVE-2026-20049 | 7.7 | Mar 4 | A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance… Affected: 7.2.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.10 |
| CVE-2026-20014 | 7.7 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user… Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2026-20105 | 7.7 | Mar 4 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2026-20100 | 7.7 | Mar 4 | A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense… Affected: 6.4.0; 6.4.0.1; 6.4.0.2; 6.4.0.3; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2025-20127 | 7.7 | Aug 14 | A vulnerability in the TLS 1.3 implementation for a specific cipher for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense… Affected: 7.4.0; 7.4.1; 7.4.1.1; 7.4.2; 7.4.2.1; 7.6.0 |
| CVE-2024-20408 | 7.7 | Oct 23 | A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20268 | 7.7 | Oct 23 | A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 6.6.0; 6.6.0.1; 6.6.1; 6.6.3; 6.6.4; 6.6.5; +34 more |
| CVE-2021-1422 | 7.7 | Jul 16 | A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 7.0.0.0 |
| CVE-2022-20685 | 7.5 | Nov 15 | A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20351 | 7.5 | Oct 23 | A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat Defense (FTD) Software and Cisco FirePOWER Services could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20339 | 7.5 | Oct 23 | A vulnerability in the TLS processing feature of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2024-20330 | 7.5 | Oct 23 | A vulnerability in the Snort 2 and Snort 3 TCP and UDP detection engine of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Appliances could allow an… Affected: 7.0.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +31 more |
| CVE-2023-20006 | 7.5 | Jun 28 | A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for… Affected: 7.2.1; 7.2.2; 7.2.3 |
| CVE-2023-20107 | 7.5 | Mar 23 | A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco… Affected: before 6.4.0 |
| CVE-2022-20947 | 7.5 | Nov 15 | A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an… Affected: 6.1.0; 6.1.0.1; 6.1.0.2; 6.1.0.3; 6.1.0.4; 6.1.0.5; +34 more |
| CVE-2022-20946 | 7.5 | Nov 15 | A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 6.3.0 through 6.3.0.5; 6.4.0 through 6.4.0.15; 6.5.0 through 6.5.0.5; 6.6.0 through 6.6.5.2; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.3; +3 more |
| CVE-2022-20854 | 7.5 | Nov 15 | A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.1.0 through 6.1.0.7; 6.2.0 through 6.2.0.6; 6.2.2 through 6.2.2.5; 6.2.3 through 6.2.3.18; 6.3.0 through 6.3.0.5; 6.4.0 through 6.4.0.15; +19 more |
| CVE-2022-20866 | 7.5 | Aug 10 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability Affected: 7.0.0 before 7.0.4; 7.1.0 before 7.2.0.1 |
| CVE-2022-20767 | 7.5 | May 3 | A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service… Affected: before 7.0.2; 7.1.0 |
| CVE-2022-20760 | 7.5 | May 3 | A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 7.0.0 before 7.0.2; 7.1.0 |
| CVE-2022-20757 | 7.5 | May 3 | A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2; 7.1.0 |
| CVE-2022-20751 | 7.5 | May 3 | A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 7.0.0 before 7.0.2; 7.1.0.0 |
| CVE-2022-20746 | 7.5 | May 3 | A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 7.0.0 before 7.0.2; 7.1.0 |
| CVE-2022-20745 | 7.5 | May 3 | A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 7.0.0 before 7.0.2; 7.1.0 |
| CVE-2022-20730 | 7.5 | May 3 | A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2 |
| CVE-2022-20795 | 7.5 | Apr 21 | A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: through 7.0.1; 7.1.0.0 through 7.1.0.1 |
| CVE-2021-34704 | 7.5 | Jan 11 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.7.0 before 6.7.0.3; 7.0.0 |
| CVE-2021-1573 | 7.5 | Jan 11 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: through 6.2.2; 6.2.3 before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 |
| CVE-2021-40118 | 7.5 | Oct 27 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |