VendorsCiscofirepower_9300_sm-56_x_3any version
Vulnerabilities

Cisco Firepower 9300 SM-56 X 3 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2020-3456
Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability
Published 2020-10-21 · Modified
8.8EPSS 0.006
CVE-2020-3459
Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability
Published 2020-10-21 · Modified
7.8EPSS 0.004
CVE-2020-3455
Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability
Published 2020-10-21 · Modified
7.8EPSS 0.003
CVE-2021-34714
Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability
Published 2021-09-23 · Modified
7.4EPSS 0.004
CVE-2020-3169
Cisco FXOS Software CLI Command Injection Vulnerability
Published 2020-02-26 · Modified
7.2EPSS 0.004
CVE-2020-3457
Cisco FXOS Software Command Injection Vulnerability
Published 2020-10-21 · Modified
7.2EPSS 0.004
CVE-2022-20865
Cisco FXOS Software Command Injection Vulnerability
Published 2022-08-25 · Modified
6.7EPSS 0.003
CVE-2023-20015
Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability
Published 2023-02-23 · Modified
6.7EPSS 0.002
CVE-2023-20016
Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability
Published 2023-02-23 · Modified
6.5EPSS 0.001
CVE-2023-20234
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. The vulnerability occurs because there is no validation of parameters when a specific CLI command is used. An attacker could exploit this vulnerability by authenticating to an affected device and using the command at the CLI. A successful exploit could allow the attacker to overwrite any file on the disk of the affected device, including system files. The attacker must have valid administrative credentials on the affected device to exploit this vulnerability.
Published 2023-08-23 · Modified
6.0EPSS 0.002