Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,095 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-20073	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.38	5.8	0.00	Mar 4, 2026	A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should be denied through an affected device. This vulnerability is…
CVE-2026-20068	Cisco Systems, Inc. Snort	Med	0.38	5.8	0.00	Mar 4, 2026	Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to…
CVE-2026-20067	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.00	Mar 4, 2026	Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to…
CVE-2026-20066	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.00	Mar 4, 2026	Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to an…
CVE-2026-20065	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.00	Mar 4, 2026	Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to an…
CVE-2026-20058	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.00	Mar 4, 2026	Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An…
CVE-2026-20057	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.00	Mar 4, 2026	Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to lack of proper…
CVE-2026-20054	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.00	Mar 4, 2026	Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to improper error checking when decompressing VBA data. An…
CVE-2026-20053	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.00	Mar 4, 2026	Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to improper range checking when decompressing VBA data, which is…
CVE-2026-20052	Cisco Systems, Inc. Secure Firewall Threat Defense	Med	0.38	5.8	0.00	Mar 4, 2026	A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a logic…
CVE-2026-20018	Cisco Systems, Inc. Secure Firewall Management Center	Med	0.38	5.9	0.00	Mar 4, 2026	A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the…
CVE-2026-20015	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.38	5.8	0.00	Mar 4, 2026	A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may impact the availability of services to devices elsewhere in the…
CVE-2026-20013	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.38	5.8	0.00	Mar 4, 2026	A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the…
CVE-2026-20007	Cisco Systems, Inc. Secure Firewall Threat Defense	Med	0.38	5.8	0.00	Mar 4, 2026	A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This…
CVE-2026-20006	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.00	Mar 4, 2026	A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to unexpectedly restart, resulting in a denial of…
CVE-2026-20005	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.01	Mar 4, 2026	Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to…
CVE-2026-20026	Cisco Systems, Inc. Snort 3 Detection Engine	Med	0.38	5.8	0.01	Jan 7, 2026	Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet…
CVE-2025-20360	Cisco Systems, Inc. Snort 3 HTTP Decoder	Med	0.38	5.8	0.00	Oct 15, 2025	Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of complete error checking when the MIME fields of…
CVE-2025-20339	Cisco Systems, Inc. SD-WAN vEdge Software	Med	0.38	5.8	0.00	Sep 24, 2025	A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the improper enforcement of the implicit deny all at the end of…
CVE-2025-20268	Cisco Systems, Inc. Cisco Secure Firewall Threat Defense (FTD) Software	Med	0.38	5.8	0.00	Aug 14, 2025	A vulnerability in the Geolocation-Based Remote Access (RA) VPN feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies to allow or deny HTTP connections based on a country or region. This…
CVE-2025-20254	Cisco Systems, Inc. Cisco Secure Firewall Threat Defense (FTD) Software	Med	0.38	5.8	0.00	Aug 14, 2025	A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a…
CVE-2025-20252	Cisco Systems, Inc. Cisco Secure Firewall Threat Defense (FTD) Software	Med	0.38	5.8	0.00	Aug 14, 2025	A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a…
CVE-2025-20225	Cisco Systems, Inc. IOS and IOS XE Software	Med	0.38	5.8	0.01	Aug 14, 2025	A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger…
CVE-2025-20224	Cisco Systems, Inc. ASA Software	Med	0.38	5.8	0.01	Aug 14, 2025	A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a…
CVE-2025-20288	Cisco Systems, Inc. Unified Intelligence Center	Med	0.38	5.8	0.00	Jul 16, 2025	A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation…
CVE-2025-20157	Cisco Systems, Inc. Catalyst SD-WAN Manager	Med	0.38	5.9	0.00	May 7, 2025	A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that…
CVE-2025-20145	Cisco Systems, Inc. iOS Xr	Med	0.38	5.8	0.00	Mar 12, 2025	A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly when they are…
CVE-2025-20153	Cisco Systems, Inc. Secure Email Gateway	Med	0.38	5.8	0.00	Feb 19, 2025	A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow emails that should have been denied to flow through an affected device. This vulnerability is due to…
CVE-2025-20183	Cisco Systems, Inc. Asyncos	Med	0.38	5.8	0.00	Feb 5, 2025	A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an…
CVE-2021-34753	Cisco Systems, Inc. Secure Firewall Threat Defense	Med	0.38	5.8	0.01	Nov 15, 2024	A vulnerability in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. This vulnerability is due to incomplete…
CVE-2021-1494	Cisco Systems, Inc. Snort	Med	0.38	5.8	0.01	Nov 15, 2024	Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An…
CVE-2024-20431	Cisco Systems, Inc. FTD	Med	0.38	5.8	0.00	Oct 23, 2024	A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy. This vulnerability is due to improper assignment of geolocation data. An attacker…
CVE-2024-20407	Cisco Systems, Inc. Secure Firewall Threat Defense	Med	0.38	5.8	0.00	Oct 23, 2024	A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured…
CVE-2024-20384	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.38	5.8	0.00	Oct 23, 2024	A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic…
CVE-2024-20342	Cisco Systems, Inc. Snort	Med	0.38	5.8	0.00	Oct 23, 2024	Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured rate limiting filter. This vulnerability is due to an incorrect connection…
CVE-2024-20299	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.38	5.8	0.00	Oct 23, 2024	A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have…
CVE-2024-20297	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.38	5.8	0.00	Oct 23, 2024	A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have…
CVE-2024-20513	Cisco Systems, Inc. Meraki MX and Cisco Meraki Z Series Teleworker Gateway	Med	0.38	5.8	0.00	Oct 2, 2024	A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected device. This…
CVE-2024-20509	Cisco Systems, Inc. Meraki Mx	Med	0.38	5.8	0.00	Oct 2, 2024	A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service (DoS) condition for individual users of the…
CVE-2024-20502	Cisco Systems, Inc. Meraki MX and Cisco Meraki Z Series Teleworker Gateway	Med	0.38	5.8	0.01	Oct 2, 2024	A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to insufficient resource…
CVE-2024-20500	Cisco Systems, Inc. Meraki Mx	Med	0.38	5.8	0.01	Oct 2, 2024	A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vulnerability is due to…
CVE-2024-20385	Cisco Systems, Inc. Nexus Dashboard Orchestrator	Med	0.38	5.9	0.00	Oct 2, 2024	A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer…
CVE-2024-20508	Cisco Systems, Inc. Unified Threat Defense Snort Intrusion Prevention System Engine	Med	0.38	5.8	0.00	Sep 25, 2024	A vulnerability in Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured security policies or cause a denial of service (DoS) condition on an affected…
CVE-2024-20465	Cisco Systems, Inc. Cisco iOS	Med	0.38	5.8	0.00	Sep 25, 2024	A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the incorrect…
CVE-2024-20363	Cisco Systems, Inc. Snort	Med	0.38	5.8	0.00	May 22, 2024	Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules on an affected system. This vulnerability is due to incorrect HTTP packet…
CVE-2024-20361	Cisco Systems, Inc. Firepower Management Center (FMC) Software	Med	0.38	5.8	0.00	May 22, 2024	A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass configured access controls on managed devices that are running Cisco Firepower Threat…
CVE-2024-20293	Cisco Systems, Inc. Cisco Adaptive Security Appliance	Med	0.38	5.8	0.00	May 22, 2024	A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on…
CVE-2024-20261	Cisco Systems, Inc. Secure Firewall Threat Defense	Med	0.38	5.8	0.00	May 22, 2024	A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured file policy to block an encrypted archive file. This vulnerability…
CVE-2024-20357	Cisco Systems, Inc. IP Phone Firmware	Med	0.38	5.9	0.01	May 1, 2024	A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could…
CVE-2024-20316	Cisco Systems, Inc. iOS Xe	Med	0.38	5.8	0.00	Mar 27, 2024	A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list (ACL). This vulnerability is due to improper…

CVE-2026-20073MedMar 4, 2026
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.38cvss 5.8epss 0.00
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should be denied through an affected device. This vulnerability is…
CVE-2026-20068MedMar 4, 2026
Cisco Systems, Inc.
Snort
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to…
CVE-2026-20067MedMar 4, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to…
CVE-2026-20066MedMar 4, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to an…
CVE-2026-20065MedMar 4, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to an…
CVE-2026-20058MedMar 4, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by vulnerabilities in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. These vulnerabilities are due to improper error checking when decompressing VBA data. An…
CVE-2026-20057MedMar 4, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to lack of proper…
CVE-2026-20054MedMar 4, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to improper error checking when decompressing VBA data. An…
CVE-2026-20053MedMar 4, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to improper range checking when decompressing VBA data, which is…
CVE-2026-20052MedMar 4, 2026
Cisco Systems, Inc.
Secure Firewall Threat Defense
risk 0.38cvss 5.8epss 0.00
A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a logic…
CVE-2026-20018MedMar 4, 2026
Cisco Systems, Inc.
Secure Firewall Management Center
risk 0.38cvss 5.9epss 0.00
A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the…
CVE-2026-20015MedMar 4, 2026
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.38cvss 5.8epss 0.00
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may impact the availability of services to devices elsewhere in the…
CVE-2026-20013MedMar 4, 2026
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.38cvss 5.8epss 0.00
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the…
CVE-2026-20007MedMar 4, 2026
Cisco Systems, Inc.
Secure Firewall Threat Defense
risk 0.38cvss 5.8epss 0.00
A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This…
CVE-2026-20006MedMar 4, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.00
A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to unexpectedly restart, resulting in a denial of…
CVE-2026-20005MedMar 4, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.01
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to…
CVE-2026-20026MedJan 7, 2026
Cisco Systems, Inc.
Snort 3 Detection Engine
risk 0.38cvss 5.8epss 0.01
Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet…
CVE-2025-20360MedOct 15, 2025
Cisco Systems, Inc.
Snort 3 HTTP Decoder
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the Snort 3 HTTP Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of complete error checking when the MIME fields of…
CVE-2025-20339MedSep 24, 2025
Cisco Systems, Inc.
SD-WAN vEdge Software
risk 0.38cvss 5.8epss 0.00
A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the improper enforcement of the implicit deny all at the end of…
CVE-2025-20268MedAug 14, 2025
Cisco Systems, Inc.
Cisco Secure Firewall Threat Defense (FTD) Software
risk 0.38cvss 5.8epss 0.00
A vulnerability in the Geolocation-Based Remote Access (RA) VPN feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies to allow or deny HTTP connections based on a country or region. This…
CVE-2025-20254MedAug 14, 2025
Cisco Systems, Inc.
Cisco Secure Firewall Threat Defense (FTD) Software
risk 0.38cvss 5.8epss 0.00
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a…
CVE-2025-20252MedAug 14, 2025
Cisco Systems, Inc.
Cisco Secure Firewall Threat Defense (FTD) Software
risk 0.38cvss 5.8epss 0.00
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a…
CVE-2025-20225MedAug 14, 2025
Cisco Systems, Inc.
IOS and IOS XE Software
risk 0.38cvss 5.8epss 0.01
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger…
CVE-2025-20224MedAug 14, 2025
Cisco Systems, Inc.
ASA Software
risk 0.38cvss 5.8epss 0.01
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a…
CVE-2025-20288MedJul 16, 2025
Cisco Systems, Inc.
Unified Intelligence Center
risk 0.38cvss 5.8epss 0.00
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation…
CVE-2025-20157MedMay 7, 2025
Cisco Systems, Inc.
Catalyst SD-WAN Manager
risk 0.38cvss 5.9epss 0.00
A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that…
CVE-2025-20145MedMar 12, 2025
Cisco Systems, Inc.
iOS Xr
risk 0.38cvss 5.8epss 0.00
A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly when they are…
CVE-2025-20153MedFeb 19, 2025
Cisco Systems, Inc.
Secure Email Gateway
risk 0.38cvss 5.8epss 0.00
A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow emails that should have been denied to flow through an affected device. This vulnerability is due to…
CVE-2025-20183MedFeb 5, 2025
Cisco Systems, Inc.
Asyncos
risk 0.38cvss 5.8epss 0.00
A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an…
CVE-2021-34753MedNov 15, 2024
Cisco Systems, Inc.
Secure Firewall Threat Defense
risk 0.38cvss 5.8epss 0.01
A vulnerability in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. This vulnerability is due to incomplete…
CVE-2021-1494MedNov 15, 2024
Cisco Systems, Inc.
Snort
risk 0.38cvss 5.8epss 0.01
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An…
CVE-2024-20431MedOct 23, 2024
Cisco Systems, Inc.
FTD
risk 0.38cvss 5.8epss 0.00
A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy. This vulnerability is due to improper assignment of geolocation data. An attacker…
CVE-2024-20407MedOct 23, 2024
Cisco Systems, Inc.
Secure Firewall Threat Defense
risk 0.38cvss 5.8epss 0.00
A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured…
CVE-2024-20384MedOct 23, 2024
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.38cvss 5.8epss 0.00
A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic…
CVE-2024-20342MedOct 23, 2024
Cisco Systems, Inc.
Snort
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured rate limiting filter. This vulnerability is due to an incorrect connection…
CVE-2024-20299MedOct 23, 2024
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.38cvss 5.8epss 0.00
A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have…
CVE-2024-20297MedOct 23, 2024
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.38cvss 5.8epss 0.00
A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have…
CVE-2024-20513MedOct 2, 2024
Cisco Systems, Inc.
Meraki MX and Cisco Meraki Z Series Teleworker Gateway
risk 0.38cvss 5.8epss 0.00
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected device. This…
CVE-2024-20509MedOct 2, 2024
Cisco Systems, Inc.
Meraki Mx
risk 0.38cvss 5.8epss 0.00
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service (DoS) condition for individual users of the…
CVE-2024-20502MedOct 2, 2024
Cisco Systems, Inc.
Meraki MX and Cisco Meraki Z Series Teleworker Gateway
risk 0.38cvss 5.8epss 0.01
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to insufficient resource…
CVE-2024-20500MedOct 2, 2024
Cisco Systems, Inc.
Meraki Mx
risk 0.38cvss 5.8epss 0.01
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vulnerability is due to…
CVE-2024-20385MedOct 2, 2024
Cisco Systems, Inc.
Nexus Dashboard Orchestrator
risk 0.38cvss 5.9epss 0.00
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer…
CVE-2024-20508MedSep 25, 2024
Cisco Systems, Inc.
Unified Threat Defense Snort Intrusion Prevention System Engine
risk 0.38cvss 5.8epss 0.00
A vulnerability in Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured security policies or cause a denial of service (DoS) condition on an affected…
CVE-2024-20465MedSep 25, 2024
Cisco Systems, Inc.
Cisco iOS
risk 0.38cvss 5.8epss 0.00
A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the incorrect…
CVE-2024-20363MedMay 22, 2024
Cisco Systems, Inc.
Snort
risk 0.38cvss 5.8epss 0.00
Multiple Cisco products are affected by a vulnerability in the Snort Intrusion Prevention System (IPS) rule engine that could allow an unauthenticated, remote attacker to bypass the configured rules on an affected system. This vulnerability is due to incorrect HTTP packet…
CVE-2024-20361MedMay 22, 2024
Cisco Systems, Inc.
Firepower Management Center (FMC) Software
risk 0.38cvss 5.8epss 0.00
A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass configured access controls on managed devices that are running Cisco Firepower Threat…
CVE-2024-20293MedMay 22, 2024
Cisco Systems, Inc.
Cisco Adaptive Security Appliance
risk 0.38cvss 5.8epss 0.00
A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on…
CVE-2024-20261MedMay 22, 2024
Cisco Systems, Inc.
Secure Firewall Threat Defense
risk 0.38cvss 5.8epss 0.00
A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured file policy to block an encrypted archive file. This vulnerability…
CVE-2024-20357MedMay 1, 2024
Cisco Systems, Inc.
IP Phone Firmware
risk 0.38cvss 5.9epss 0.01
A vulnerability in the XML service of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to initiate phone calls on an affected device. This vulnerability exists because bounds-checking does not occur while parsing XML requests. An attacker could…
CVE-2024-20316MedMar 27, 2024
Cisco Systems, Inc.
iOS Xe
risk 0.38cvss 5.8epss 0.00
A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list (ACL). This vulnerability is due to improper…

Page 67 of 142