VYPR

Secure Firewall Threat Defense

by Cisco Systems, Inc.

CVEs (266)

  • CVE-2023-20267MedNov 1, 2023
    risk 0.26cvss 4.0epss 0.00

    A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions. This vulnerability exists because the configuration for IP geolocation rules is not parsed properly. An attacker could exploit…

  • CVE-2023-20070MedNov 1, 2023
    risk 0.26cvss 4.0epss 0.01

    A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This vulnerability is due to a logic error in how memory allocations…

  • CVE-2023-20031MedNov 1, 2023
    risk 0.26cvss 4.0epss 0.00

    A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a logic…

  • CVE-2023-20177MedNov 1, 2023
    risk 0.26cvss 4.0epss 0.01

    A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category and the Snort 3 detection engine could allow an unauthenticated, remote attacker to cause the Snort 3…

  • CVE-2022-20730MedMay 3, 2022
    risk 0.26cvss 4.0epss 0.01

    A vulnerability in the Security Intelligence feed feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the Security Intelligence DNS feed. This vulnerability is due to incorrect feed update processing. An attacker…

  • CVE-2018-15398MedOct 5, 2018
    risk 0.26cvss 4.0epss 0.02

    A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control list (ACL) that is configured for an interface of an…

Page 14 of 14