Sign inStart freeBook a demo

Firepower 9300 vulnerabilitiesAnd the versions its exploited flaws hit.

Product1 known exploited0 versions
The short answer

Firepower 9300 is made by Cisco. We track 42 published vulnerabilities listed under that exact name, across 0 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 10 December 2021. Cisco lists newer releases under their own names, such as Firepower 9300 Security Appliance, so check those pages too.

Check your version

The most recent Firepower 9300 flaw added to the known-exploited list is CVE-2021-44228, on 10 December 2021. We keep watching the known-exploited list.

Other names

Is Firepower 9300 listed under other names? Yes.

Cisco also lists Firepower 9300 under more specific names, such as Firepower 9300 Security Appliance and Firepower 9300 Sm-40. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.

Versions

Which versions of Firepower 9300 do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

Known exploited

Which Firepower 9300 vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 10.0
    CVE-2021-44228CriticalKnown exploited
    Apache Log4j2 Remote Code Execution Vulnerability

    Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

    Chance of use>99%Known exploited since10 Dec 2021
Exploit likelihood

Which Firepower 9300 flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 49%
    CVE-2022-20828High

    A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying...

    CVSS7.2Published24 Jun 2022
  2. 18%
    CVE-2022-20866High

    A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to...

    CVSS7.5Published10 Aug 2022
  3. 4.5%
    CVE-2017-3883High

    A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote...

    CVSS8.6Published19 Oct 2017
  4. 3.9%
    CVE-2018-0240High

    Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,...

    CVSS8.6Published19 Apr 2018
  5. 3.4%
    CVE-2022-20829High

    A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote...

    CVSS7.2Published24 Jun 2022
  6. 3.3%
    CVE-2022-20625Medium

    A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of...

    CVSS4.3Published23 Feb 2022
  7. 2.5%
    CVE-2019-1597High

    Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an...

    CVSS7.5Published7 Mar 2019
  8. 2.5%
    CVE-2019-1598High

    Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an...

    CVSS7.5Published7 Mar 2019
  9. 2.0%
    CVE-2019-1714High

    A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance (ASA)...

    CVSS8.6Published3 May 2019
Precursor Intelligence

Running Firepower 9300? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 42 published vulnerabilities listed under the name Firepower 9300, across 0 versions. The most recent Firepower 9300 flaw added to the known-exploited list is CVE-2021-44228, on 10 December 2021.

1 is on the list of flaws known to be exploited. The most recently added is CVE-2021-44228.

Cisco also lists Firepower 9300 under more specific names, such as Firepower 9300 Security Appliance and Firepower 9300 Sm-40. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.

Create a Precursor Intelligence account and track Firepower 9300. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring