Firepower Extensible Operating System (Cisco) - vulnerabilities (CVEs)

51 CVEs, 0 in the last 30 days, 200 known versions, newest CVE from 2024-02-29. Vendor: Cisco.

CVEs of Firepower Extensible Operating System

CVE-2024-20294 - CVSS 6.6 (medium), 2024-02-29: A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent…
CVE-2023-20234 - CVSS 6 (medium), 2023-08-23: A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an…
CVE-2023-20015 - CVSS 6.7 (medium), 2023-02-23: A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric…
CVE-2022-20934 - CVSS 6.7 (medium), 2022-11-15: A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute…
CVE-2022-20625 - CVSS 4.3 (medium), 2022-02-23: A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to…
CVE-2021-34714 - CVSS 7.4 (high), 2021-09-23: A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software,…
CVE-2021-1368 - CVSS 8.8 (high), 2021-02-24: A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent…
CVE-2020-3457 - CVSS 6.7 (medium), 2020-10-21: A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root…
CVE-2020-3456 - CVSS 8.8 (high), 2020-10-21: A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2020-3455 - CVSS 7.8 (high), 2020-10-21: A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms. The…
CVE-2020-3459 - CVSS 7.8 (high), 2020-10-21: A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root…
CVE-2020-3545 - CVSS 6.7 (medium), 2020-09-04: A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition. The…
CVE-2020-3517 - CVSS 8.6 (high), 2020-08-27: A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause…
CVE-2020-3504 - CVSS 3.3 (low), 2020-08-27: A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of…
CVE-2020-3172 - CVSS 8.8 (high), 2020-02-26: A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to…
CVE-2020-3169 - CVSS 6.7 (medium), 2020-02-26: A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating…
CVE-2020-3167 - CVSS 7.8 (high), 2020-02-26: A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on…
CVE-2020-3166 - CVSS 6.7 (medium), 2020-02-26: A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating…
CVE-2020-3120 - CVSS 7.4 (high), 2020-02-05: A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an…
CVE-2019-1734 - CVSS 5.5 (medium), 2019-11-05: A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker…
CVE-2019-12699 - CVSS 8.8 (high), 2019-10-02: Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to…
CVE-2019-12700 - CVSS 7.7 (high), 2019-10-02: A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower…
CVE-2019-1780 - CVSS 6.7 (medium), 2019-05-16: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to…
CVE-2019-1858 - CVSS 8.6 (high), 2019-05-16: A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an…
CVE-2019-1795 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1779 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1600 - CVSS 6.7 (medium), 2019-03-07: A vulnerability in the file system permissions of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to access…
CVE-2019-1598 - CVSS 8.6 (high), 2019-03-07: Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software…
CVE-2019-1597 - CVSS 8.6 (high), 2019-03-07: Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software…
CVE-2018-0395 - CVSS 8.8 (high), 2018-10-17: A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated,…
CVE-2018-0331 - CVSS 6.5 (medium), 2018-06-21: A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a…
CVE-2018-0302 - CVSS 7.8 (high), 2018-06-21: A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a…
CVE-2018-0311 - CVSS 7.5 (high), 2018-06-21: A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to…
CVE-2018-0298 - CVSS 7.5 (high), 2018-06-21: A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer…
CVE-2018-0310 - CVSS 9.8 (critical), 2018-06-21: A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to…
CVE-2018-0303 - CVSS 8.8 (high), 2018-06-21: A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to…
CVE-2018-0294 - CVSS 6.7 (medium), 2018-06-20: A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an…
CVE-2017-12329 - CVSS 6.3 (medium), 2017-11-30: A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, local attacker to…
CVE-2017-12299 - CVSS 5.3 (medium), 2017-11-16: A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could…
CVE-2017-12277 - CVSS 8.8 (high), 2017-11-02: A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security…
CVE-2017-3883 - CVSS 8.6 (high), 2017-10-19: A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS…
CVE-2017-6598 - CVSS 6.7 (medium), 2017-04-07: A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall…
CVE-2017-6602 - CVSS 4.4 (medium), 2017-04-07: A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower…
CVE-2017-6597 - CVSS 7.8 (high), 2017-04-07: A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall…
CVE-2017-6601 - CVSS 7.1 (high), 2017-04-07: A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco…
CVE-2017-6600 - CVSS 7.8 (high), 2017-04-07: A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco…
CVE-2015-6435 - CVSS 9.8 (critical), 2016-01-22: An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before…
CVE-2015-6380 - CVSS 6.5 (medium), 2015-11-24: An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated…
CVE-2015-6374 - CVSS 4.3 (medium), 2015-11-19: The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which…
CVE-2015-6371 - CVSS 4 (medium), 2015-11-19: Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to read arbitrary files via crafted…
CVE-2015-6370 - CVSS 7.2 (high), 2015-11-19: The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows local users to execute arbitrary…
CVE-2015-6369 - CVSS 4.9 (medium), 2015-11-19: The USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows physically proximate attackers to cause a denial of…
CVE-2015-6368 - CVSS 5 (medium), 2015-11-19: Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to read files via a crafted HTTP request, aka Bug ID…
CVE-2015-6373 - CVSS 6.8 (medium), 2015-11-18: Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to…
CVE-2015-6372 - CVSS 4.3 (medium), 2015-11-18: Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000…
CVE-2015-4287 - CVSS 5 (medium), 2015-07-29: Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain…