Cisco Releases November 2022 ASA, FMC, and FTD Software Security Advisory
Nineteen advisories are included in the semi-annual Cisco Adaptive Security Appliance Software (ASA), Firepower Management Center (FMC) Software, and Firepower Threat Defense (FTD) Software Security Advisory bundled publication
Summary
Nineteen advisories are included in the semi-annual Cisco Adaptive Security Appliance Software (ASA), Firepower Management Center (FMC) Software, and Firepower Threat Defense (FTD) Software Security Advisory bundled publication
Affected platforms
The following platforms are known to be affected:
Threat details
Introduction
Cisco has released 19 security advisories that cover 35 vulnerabilities in its semi-annual bundle of Cisco Adaptive Security Appliance Software (ASA), Firepower Management Center (FMC) Software, and Firepower Threat Defense (FTD) Software Advisories. The 8 High impact advisories concern 8 vulnerabilities addressing denial of service conditions, default credentials, and secure boot bypass.
The 11 Medium impact advisories included in the bundle address 27 vulnerabilities such as privilege escalation, command injection, authorisation bypass, cross-site scripting, denial of service, XML injection, information disclosure, and client-side request smuggling. A remote, unauthenticated attacker could exploit some of these vulnerabilities to take control of an affected system.
Remediation advice
Affected organisations are encouraged to review November 2022 Cisco ASA, FMC, and FTD Software Security Advisory bundled publication and the following Cisco Security Advisories and apply the necessary updates or workarounds.
Remediation steps
| Type | Step |
|---|---|
| Patch |
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability| cisco-sa-asa-ftd-dap-dos-GhYZBxDU https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-dap-dos-GhYZBxDU |
| Patch |
Cisco Firepower Threat Defense Software Generic Routing Encapsulation Denial of Service Vulnerability | cisco-sa-ftd-gre-dos-hmedHQPM https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-gre-dos-hmedHQPM |
| Patch |
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | cisco-sa-asaftd-snmp-dos-qsqBNM6x https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-snmp-dos-qsqBNM6x |
| Patch |
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability | cisco-sa-ssl-client-dos-cCrQPkA https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssl-client-dos-cCrQPkA |
| Patch |
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability | cisco-sa-asafdt-webvpn-dos-tzPSYern https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asafdt-webvpn-dos-tzPSYern |
| Patch |
Cisco Firepower Management Center and Firepower Threat Defense Software SSH Denial of Service Vulnerability | cisco-sa-fmc-dos-OwEunWJN https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-dos-OwEunWJN |
| Patch |
Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability | cisco-sa-fmcsfr-snmp-access-6gqgtJ4S https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmcsfr-snmp-access-6gqgtJ4S |
| Patch |
Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability | cisco-sa-fw3100-secure-boot-5M8mUh26 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fw3100-secure-boot-5M8mUh26 |
| Patch |
Cisco Firepower Threat Defense Software Privilege Escalation Vulnerability | cisco-sa-ftd-mgmt-privesc-7GqR2th https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-mgmt-privesc-7GqR2th |
| Patch |
Cisco Firepower Management Center Software Command Injection Vulnerabilities | cisco-sa-fmc-cmd-inj-Z3B5MY35 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-Z3B5MY35 |
| Patch |
Cisco Firepower Threat Defense Software and Cisco FXOS Software Command Injection Vulnerability | cisco-sa-ftd-fxos-cmd-inj-Q9bLNsrK https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-fxos-cmd-inj-Q9bLNsrK |
| Patch |
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability | cisco-sa-asa-ftd-vp-authz-N2GckjN6 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-vp-authz-N2GckjN6 |
| Patch |
Cisco Firepower Threat Defense Software SIP and Snort 3 Detection Engine Denial of Service Vulnerability | cisco-sa-ftdsnort3sip-dos-A4cHeArC https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdsnort3sip-dos-A4cHeArC |
| Patch |
Multiple Cisco Products Snort SMB2 Detection Engine Policy Bypass and Denial of Service Vulnerabilities | cisco-sa-snort-smb-3nfhJtr https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-smb-3nfhJtr |
| Patch |
Cisco Firepower Management Center Software Information Disclosure Vulnerability | cisco-sa-fmc-info-disc-UghNRRhP https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-info-disc-UghNRRhP |
| Patch |
Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack Vulnerability | cisco-sa-ftd-tls-bb-rCgtmY2 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-bb-rCgtmY2 |
| Patch |
Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | cisco-sa-fmc-xss-LATZYzxs https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-LATZYzxs |
| Patch |
Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Client-Side Request Smuggling Vulnerability | cisco-sa-asa-webvpn-LOeKsNmO https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-webvpn-LOeKsNmO |
| Patch |
Cisco Firepower Management Center Software XML External Entity Injection Vulnerability | cisco-sa-fmc-xxe-MzPC4bYd https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xxe-MzPC4bYd |
Definitive source of threat updates
CVE Vulnerabilities
Last edited: 10 November 2022 3:23 pm