Cisco Firepower Threat Defense Software und Management Center: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• High 8.6
  CVE-2023-20083

  A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defen…

  Cisco Cisco Firepower Threat Defense Software Network devices
  Nov 1, 2023
• High 8.6
  CVE-2023-20244

  A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower …

  Cisco Cisco Firepower Threat Defense Software Network devices
  Nov 1, 2023
• High 8.2
  CVE-2023-20063

  Cisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center Code Injection Vulnerability

  A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco Firepower Management (FMC) Software could allow an authenticated, local attacker to …

  Cisco Cisco Firepower Threat Defense Software Cisco Firepower Management Center Network devices
  Nov 1, 2023
• Medium 5.8
  CVE-2023-20270

  A vulnerability in the interaction between the Server Message Block (SMB) protocol preprocessor and the Snort 3 detecti…

  Cisco Cisco Firepower Threat Defense Software Network devices
  Nov 1, 2023
• Medium 4.0
  CVE-2023-20031

  A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat…

  Cisco Cisco Firepower Threat Defense Software Network devices
  Nov 1, 2023
• Medium 4.0
  CVE-2023-20070

  A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unaut…

  Cisco Cisco Firepower Threat Defense Software Network devices
  Nov 1, 2023
• Medium 4.0
  CVE-2023-20177

  A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when…

  Cisco Cisco Firepower Threat Defense Software Network devices
  Nov 1, 2023
• Medium 4.0
  CVE-2023-20267

  A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially b…

  Cisco Cisco Firepower Threat Defense Software Network devices
  Nov 1, 2023

Revision history

1. 2023-11-01 #1

   Initiale Fassung

References

• Cisco Security Advisory vom 2023-11-01
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sa-ftd-snort3-urldos-OccFQTeX
• Cisco Security Advisory vom 2023-11-01
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-uAnUntcV
• Cisco Security Advisory vom 2023-11-01
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdsnort3sip-bypass-LMz2ThKn
• Cisco Security Advisory vom 2023-11-01
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdsnort3sip-bypass-LMz2ThKn
• Cisco Security Advisory vom 2023-11-01
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3-8U4HHxH8
• Cisco Security Advisory vom 2023-11-01
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-smbsnort3-dos-pfOjOYUV
• Cisco Security Advisory vom 2023-11-01
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-intrusion-dos-DfT7wyGC
• Cisco Security Advisory vom 2023-11-01
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-icmpv6-dos-4eMkLuN
• Cisco Security Advisory vom 2023-11-01
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-fmc-code-inj-wSHrgz8L