A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access con

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• cisco secure firewall threat defense6.0.0
• cisco secure firewall threat defense6.0.1
• cisco secure firewall threat defense6.1.0
• cisco secure firewall threat defense6.1.0.2
• cisco secure firewall threat defense6.2.0
• cisco secure firewall threat defense6.2.1
• cisco secure firewall threat defense6.2.2

Versions reported by the vendor

Affected version ranges reported by the assigning authority (cisco). Independent of NVD's CPE analysis and usually ahead of it.

• n/a Cisco Firepower Threat Defense and Cisco ASA with FirePOWER Module

  • Cisco Firepower Threat Defense and Cisco ASA with FirePOWER Moduleaffected

Other highest-scoring records for the same primary product.

• CVE-2020-3259Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure VulnerabilityKEV
  82Now
• CVE-2020-3580Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesKEV
  80Now
• CVE-2020-3187Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability
  65This week
• CVE-2024-20481A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat DefeKEV
  58Plan
• CVE-2022-20759Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability
  43Plan
• CVE-2020-3562Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability
  35Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.