[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ft2XbKMGkyqMo5OVaFxip5kz6u1X7SvOm2dqp1hZuyf8":3,"g5a-family:cisco\u002Ffirepower_1150":105,"g5a-ex:cisco\u002Ffirepower_1150@*":106},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":78,"seoMetadata":83,"meta":102},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"cisco","firepower_1150",0,16,1,"2024-10-23",[],"Firepower 1150 by Cisco is a technology product and 16 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,33,39,43,49,54,61,67,73],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10",10,"v3.1","Critical",0.99999,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":32},"CVE-2022-20828","A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerability is due to improper handling of undefined command parameters. An attacker could exploit this vulnerability by using a crafted command on the CLI or by submitting a crafted HTTPS request to the web-based management interface of the Cisco ASA that is hosting the ASA FirePOWER module. Note: To exploit this vulnerability, the attacker must have administrative access to the Cisco ASA. A user who has administrative access to a particular Cisco ASA is also expected to have administrative access to the ASA FirePOWER module that is hosted by that Cisco ASA.","2022-06-24",7.2,"High",false,0.49294,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":38},"CVE-2022-20866","A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key is stored in memory on a hardware platform that performs hardware-based cryptography. An attacker could exploit this vulnerability by using a Lenstra side-channel attack against the targeted device. A successful exploit could allow the attacker to retrieve the RSA private key. The following conditions may be observed on an affected device: This vulnerability will apply to approximately 5 percent of the RSA keys on a device that is running a vulnerable release of Cisco ASA Software or Cisco FTD Software; not all RSA keys are expected to be affected due to mathematical calculations applied to the RSA key. The RSA key could be valid but have specific characteristics that make it vulnerable to the potential leak of the RSA private key. If an attacker obtains the RSA private key, they could use the key to impersonate a device that is running Cisco ASA Software or Cisco FTD Software or to decrypt the device traffic. See the Indicators of Compromise section for more information on the detection of this type of RSA key. The RSA key could be malformed and invalid. A malformed RSA key is not functional, and a TLS client connection to a device that is running Cisco ASA Software or Cisco FTD Software that uses the malformed RSA key will result in a TLS signature failure, which means a vulnerable software release created an invalid RSA signature that failed verification. If an attacker obtains the RSA private key, they could use the key to impersonate a device that is running Cisco ASA Software or Cisco FTD Software or to decrypt the device traffic.","2022-08-10",7.5,0.17876,{"cveId":40,"description":41,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":42},"CVE-2022-20829","A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker with administrative privileges to upload an ASDM image that contains malicious code to a device that is running Cisco ASA Software. This vulnerability is due to insufficient validation of the authenticity of an ASDM image during its installation on a device that is running Cisco ASA Software. An attacker could exploit this vulnerability by installing a crafted ASDM image on the device that is running Cisco ASA Software and then waiting for a targeted user to access that device using ASDM. A successful exploit could allow the attacker to execute arbitrary code on the machine of the targeted user with the privileges of that user on that machine. Notes: To successfully exploit this vulnerability, the attacker must have administrative privileges on the device that is running Cisco ASA Software. Potential targets are limited to users who manage the same device that is running Cisco ASA Software using ASDM. Cisco has released and will release software updates that address this vulnerability.",0.03412,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":48},"CVE-2021-1402","A vulnerability in the software-based SSL\u002FTLS message handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of SSL\u002FTLS messages when the device performs software-based SSL decryption. An attacker could exploit this vulnerability by sending a crafted SSL\u002FTLS message through an affected device. SSL\u002FTLS messages sent to an affected device do not trigger this vulnerability. A successful exploit could allow the attacker to cause a process to crash. This crash would then trigger a reload of the device. No manual intervention is needed to recover the device after the reload.","2021-04-29",8.6,0.01397,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":37,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":53},"CVE-2022-20751","A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient memory management for certain Snort events. An attacker could exploit this vulnerability by sending a series of crafted IP packets that would generate specific Snort events on an affected device. A sustained attack could cause an out of memory condition on the affected device. A successful exploit could allow the attacker to interrupt all traffic flowing through the affected device. In some circumstances, the attacker may be able to cause the device to reload, resulting in a DoS condition.","2022-05-03",0.01358,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":22,"severity":59,"isKev":31,"epssScore":60},"CVE-2020-3585","A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper implementation of countermeasures against the Bleichenbacher attack for cipher suites that rely on RSA for key exchange. An attacker could exploit this vulnerability by sending crafted TLS messages to the device, which would act as an oracle and allow the attacker to carry out a chosen-ciphertext attack. A successful exploit could allow the attacker to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions to the affected device. To exploit this vulnerability, an attacker must be able to perform both of the following actions: Capture TLS traffic that is in transit between clients and the affected device Actively establish a considerable number of TLS connections to the affected device","2020-10-21",3.7,"Low",0.01264,{"cveId":62,"description":63,"publishedDate":46,"cvssScore":64,"cvssVersion":22,"severity":65,"isKev":31,"epssScore":66},"CVE-2021-1489","A vulnerability in filesystem usage management for Cisco Firepower Device Manager (FDM) Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to the insufficient management of available filesystem resources. An attacker could exploit this vulnerability by uploading files to the device and exhausting available filesystem resources. A successful exploit could allow the attacker to cause database errors and cause the device to become unresponsive to web-based management. Manual intervention is required to free filesystem resources and return the device to an operational state.",6.5,"Medium",0.01184,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":72},"CVE-2020-3167","A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted arguments to specific commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS with the privileges of the currently logged-in user for all affected platforms excluding Cisco UCS 6400 Series Fabric Interconnects. On Cisco UCS 6400 Series Fabric Interconnects, the injected commands are executed with root privileges.","2020-02-26",7.8,0.00897,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":37,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":77},"CVE-2022-20795","A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization, resulting in a denial of service (DoS) condition. This vulnerability is due to suboptimal processing that occurs when establishing a DTLS tunnel as part of an AnyConnect SSL VPN connection. An attacker could exploit this vulnerability by sending a steady stream of crafted DTLS traffic to an affected device. A successful exploit could allow the attacker to exhaust resources on the affected VPN headend device. This could cause existing DTLS tunnels to stop passing traffic and prevent new DTLS tunnels from establishing, resulting in a DoS condition. Note: When the attack traffic stops, the device recovers gracefully.","2022-04-21",0.00702,[79],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":80,"cisaDateAdded":20,"cisaShortDescription":81,"cisaRequiredAction":82},"Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Firepower 1150 by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Firepower 1150 by Cisco with 16 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Firepower 1150 vulnerabilities, Firepower 1150 security, Firepower 1150 CVE, Cisco Firepower 1150, Firepower 1150 threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Firepower 1150 KEV, Firepower 1150 exploited vulnerabilities",{"@context":88,"@type":89,"name":90,"description":85,"url":91,"manufacturer":92,"applicationCategory":96,"softwareVersion":97,"mainEntity":98},"https:\u002F\u002Fschema.org","SoftwareApplication","Firepower 1150","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Ffirepower_1150",{"@type":93,"name":94,"url":95},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":99,"name":100,"description":101,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Firepower 1150 Security Vulnerabilities","Security vulnerabilities affecting Firepower 1150 by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":103,"apiVersion":104},"2026-10-18T23:47:52.622Z","3.0",[],{"rows":107,"total":11,"capped":31,"failed":9},[108],{"cveId":18,"name":80,"severity":23,"cvss":21,"added":20,"epss":24,"published":109,"ranges":110,"checked":4,"hits":111,"covers":31},"2021-12-10T10:15:09.143",[],[]]