Cisco Firepower 4115 any version

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability

Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities

Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability

Cisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrary Code Execution Vulnerability

Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability

Cisco Firepower 4110 ICMP Flood Denial of Service Vulnerability

Cisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability

Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities

Cisco FXOS and UCS Manager Software CLI Command Injection Vulnerability

Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability

Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability

Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability

Cisco Firepower Threat Defense Software Command Injection Vulnerability

A vulnerability in the Simple Network Management Protocol (SNMP) service of Cisco FXOS Software for Firepower 4100 Series and Firepower 9300 Security Appliances and of Cisco UCS 6300 Series Fabric Interconnects could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the improper handling of specific SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: This vulnerability affects all supported SNMP versions. To exploit this vulnerability through SNMPv2c or earlier, an attacker must know the SNMP community string that is configured on an affected device. To exploit this vulnerability through SNMPv3, the attacker must have valid credentials for an SNMP user who is configured on the affected device.

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability

Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities

Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities

Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software AnyConnect SSL VPN Denial of Service Vulnerability

Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability

Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco FXOS and NX-OS Software Command Injection Vulnerability

Cisco FXOS Software CLI Command Injection Vulnerability

Cisco FXOS Software Command Injection Vulnerability

Cisco FXOS Software Buffer Overflow Vulnerability

Cisco FXOS and NX-OS Software Secure Configuration Bypass Vulnerability

Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability

Cisco FXOS Software Command Injection Vulnerability

Cisco FXOS Software CLI Arbitrary File Read and Write Vulnerability

Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific fields in an LLDP frame. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface of an affected device and having an authenticated user retrieve LLDP statistics from the affected device through CLI show commands or Simple Network Management Protocol (SNMP) requests. A successful exploit could allow the attacker to cause the LLDP service to crash and stop running on the affected device. In certain situations, the LLDP crash may result in a reload of the affected device. Note: LLDP is a Layer 2 link protocol. To exploit this vulnerability, an attacker would need to be directly connected to an interface of an affected device, either physically or logically (for example, through a Layer 2 Tunnel configured to transport the LLDP protocol).

Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability

Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. The vulnerability occurs because there is no validation of parameters when a specific CLI command is used. An attacker could exploit this vulnerability by authenticating to an affected device and using the command at the CLI. A successful exploit could allow the attacker to overwrite any file on the disk of the affected device, including system files. The attacker must have valid administrative credentials on the affected device to exploit this vulnerability.

Cisco FXOS and NX-OS Software Sensitive File Read Information Disclosure Vulnerability

Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability