Cisco Firepower Extensible Operating System (FXOS) 2.10.1.166 when installed on Cisco Firepower 4100 Series

ProduktUS

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

0
KEV-gelistet
0
öffentlicher Exploit
0
EPSS ≥ 10%
0
kritisch
nach Schweregrad
0critical1high6medium0low
aktualisiert 2026-10-30
01

Schwachstellen (8)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-20625USmedium4.3—
A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to re…
CVE-2026-20099US——
A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administrative pr…
CVE-2022-20824UShigh8.8—
A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code…
CVE-2022-20865USmedium6.7—
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker wou…
CVE-2024-20294USmedium6.6—
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a den…
CVE-2022-20934USmedium6.7—
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on th…
CVE-2023-20015USmedium6.7—
A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allo…
CVE-2023-20234USmedium6.0—
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, inclu…
02

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

  • CWE-78Improper Neutralization of Special Elements used in an OS Command4 CVEs
  • CWE-77Improper Neutralization of Special Elements used in a Command2 CVEs
  • CWE-121Stack-based Buffer Overflow1 CVEs
  • CWE-399CWE-3991 CVEs
  • CWE-400Uncontrolled Resource Consumption1 CVEs
  • CWE-73External Control of File Name or Path1 CVEs
  • CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs
  • CWE-787Out-of-bounds Write1 CVEs
03

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan