SF
Product
Secure Firewall Threat Defense
On CISA KEVExploited in the wildRansomware-linked
274
CVEs
11
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 138Medium 130Low 1
Watch
Add Secure Firewall Threat Defense to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40117 | 7.5 | Oct 27 | A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.2.3.17; 6.3.0 before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-40116 | 7.5 | Oct 27 | Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: 6.4.0 before 6.4.0.13; 6.6.0 before 6.6.5.1; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-40114 | 7.5 | Oct 27 | Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause… Affected: before 6.4.0.12; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.2 |
| CVE-2021-34792 | 7.5 | Oct 27 | A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 6.4.0 before 6.4.0.13; 6.6.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-34783 | 7.5 | Oct 27 | A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an… Affected: 6.4.0 before 6.4.0.13; 6.6.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-34781 | 7.5 | Oct 27 | A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 6.3.0 before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-34754 | 7.5 | Oct 27 | Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.4.0 before 6.4.0.13; 6.6.0 before 6.6.5.1; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 |
| CVE-2021-1504 | 7.5 | Apr 29 | Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a… Affected: 6.5.0 before 6.6.4; 6.7.0 before 6.7.0.1 |
| CVE-2021-1501 | 7.5 | Apr 29 | A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.2 before 6.4.0.12; 6.5.0 before 6.6.4; 6.7.0 before 6.7.0.2 |
| CVE-2021-1445 | 7.5 | Apr 29 | Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a… Affected: 6.5.0 before 6.6.4; 6.7.0 before 6.7.0.1 |
| CVE-2021-1223 | 7.5 | Jan 13 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for… Affected: before 6.7.0 |
| CVE-2020-3555 | 7.5 | Oct 21 | A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: through 6.2.2; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 |
| CVE-2020-3554 | 7.5 | Oct 21 | A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: through 6.2.2; 6.3.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 |
| CVE-2020-3533 | 7.5 | Oct 21 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.1 |
| CVE-2020-3529 | 7.5 | Oct 21 | A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.1 |
| CVE-2020-3528 | 7.5 | Oct 21 | A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.1 |
| CVE-2020-3317 | 7.5 | Oct 21 | A vulnerability in the ssl_inspection component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to crash Snort instances Affected: before 6.4.0.10; 6.5.0 before 6.5.0.5 |
| CVE-2020-3306 | 7.5 | May 6 | A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 6.3.0.5; 6.4.0 before 6.4.0.4 |
| CVE-2020-3305 | 7.5 | May 6 | A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)… Affected: before 6.3.0.5; 6.4.0 before 6.4.0.6 |
| CVE-2020-3303 | 7.5 | May 6 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: before 6.3.0.5; 6.4.0 before 6.4.0.6 |
| CVE-2020-3298 | 7.5 | May 6 | A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 6.2.0 before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.9; 6.5.0 before 6.5.0.5 |
| CVE-2020-3255 | 7.5 | May 6 | A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of… Affected: 6.2.3 before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.9 |
| CVE-2020-3254 | 7.5 | May 6 | Multiple vulnerabilities in the Media Gateway Control Protocol (MGCP) inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD)… Affected: 6.2.3 before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.4 |
| CVE-2020-3195 | 7.5 | May 6 | A vulnerability in the Open Shortest Path First (OSPF) implementation in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: 6.4.0 before 6.4.0.9; 6.5.0 before 6.5.0.5 |
| CVE-2020-3179 | 7.5 | May 6 | A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: 6.3.0 before 6.3.0.5; 6.4.0 before 6.4.0.6 |
| CVE-2019-12698 | 7.5 | Oct 2 | A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 6.2.3.15; 6.3.0 before 6.3.0.5; 6.4.0 before 6.4.0.6 |
| CVE-2019-12678 | 7.5 | Oct 2 | A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… Affected: before 6.2.3.15; 6.3.0 before 6.3.0.4; 6.4.0 before 6.4.0.4 |
| CVE-2019-12673 | 7.5 | Oct 2 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… Affected: before 6.3.0.5; 6.4.0 before 6.4.0.4 |
| CVE-2019-12627 | 7.5 | Aug 21 | A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized… Affected: before 6.4.0.4 |
| CVE-2019-1970 | 7.5 | Aug 8 | A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 6.4.1 |
| CVE-2019-1715 | 7.5 | May 3 | A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and… Affected: 6.2.1 before 6.2.3.12; 6.3.0 before 6.3.0.3 |
| CVE-2019-1704 | 7.5 | May 3 | Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.0.0 before 6.2.3.12 |
| CVE-2019-1697 | 7.5 | May 3 | A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense… Affected: before 6.2.3.12; 6.3.0 before 6.3.0.3 |
| CVE-2019-1687 | 7.5 | May 3 | A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 6.0.0 before 6.2.3.12; 6.3.0 before 6.3.0.3 |
| CVE-2018-15462 | 7.5 | May 3 | A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: before 6.2.3.12; 6.3.0 before 6.3.0.3 |
| CVE-2018-15383 | 7.5 | Oct 5 | A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… Affected: 6.0.1; 6.1.0; 6.2.0; 6.2.2; 6.2.3 |
| CVE-2018-0227 | 7.5 | Apr 19 | A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow… Affected: 6.0 through 6.0.1.4; 6.1.0 through 6.1.0.5 |
| CVE-2017-6632 | 7.5 | May 22 | A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote… Affected: 5.3.0; 5.4.0; 6.0.0; 6.0.1; 6.0.1.3; 6.1.0; +4 more |
| CVE-2022-20742 | 7.4 | May 3 | A vulnerability in an IPsec VPN library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 7.0.0 before 7.0.2; 7.1.0 |
| CVE-2020-3577 | 7.4 | Oct 21 | A vulnerability in the ingress packet processing path of Cisco Firepower Threat Defense (FTD) Software for interfaces that are configured either as Inline Pair or in Passive mode… Affected: before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.5.0 before 6.5.0.5; 6.6.0 before 6.6.1 |
| CVE-2020-3334 | 7.4 | May 6 | A vulnerability in the ARP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series… Affected: before 6.6.0 |
| CVE-2019-12676 | 7.4 | Oct 2 | A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: before 6.3.0.4; 6.4.0 before 6.4.0.4 |
| CVE-2019-1696 | 7.4 | May 3 | Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.0.0 before 6.2.3.12 |
| CVE-2019-15992 | 7.2 | Sep 23 | A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… Affected: All versions, or not specified |
| CVE-2021-1493 | 7.1 | Apr 29 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated,… Affected: before 6.4.0.12; 6.5.0 before 6.6.3; 6.7.0 before 6.7.0.1 |
| CVE-2017-6625 | 7.1 | May 3 | A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access control policy of Cisco Firepower System… Affected: 6.0.0; 6.0.1; 6.1.0; 6.1.0.2; 6.2.0; 6.2.1; +1 more |
| CVE-2026-20025 | 6.8 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 6.4.0 before 7.0.9; 7.1.0 before 7.2.11; 7.3.0 before 7.4.3; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2026-20050 | 6.8 | Mar 4 | Cisco Secure Firewall Threat Defense Decryption Policy Denial of Service Vulnerability Affected: 7.1.0 before 7.2.11; 7.3.0 before 7.4.4; 7.6.0 before 7.6.4; 7.7.0 before 7.7.11 |
| CVE-2022-20826 | 6.8 | Nov 15 | A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat… Affected: 7.1.0.0; 7.2.0.0; 7.2.0.1 |
| CVE-2018-15399 | 6.8 | Oct 5 | A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.2.0 |