Skip to main content

Cisco Releases November 2022 ASA, FMC, and FTD Software Security Advisory

Nineteen advisories are included in the semi-annual Cisco Adaptive Security Appliance Software (ASA), Firepower Management Center (FMC) Software, and Firepower Threat Defense (FTD) Software Security Advisory bundled publication

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Nineteen advisories are included in the semi-annual Cisco Adaptive Security Appliance Software (ASA), Firepower Management Center (FMC) Software, and Firepower Threat Defense (FTD) Software Security Advisory bundled publication


Threat details

Introduction

Cisco has released 19 security advisories that cover 35 vulnerabilities in its semi-annual bundle of Cisco Adaptive Security Appliance Software (ASA), Firepower Management Center (FMC) Software, and Firepower Threat Defense (FTD) Software Advisories. The 8 High impact advisories concern 8 vulnerabilities addressing denial of service conditions, default credentials, and secure boot bypass.

The 11 Medium impact advisories included in the bundle address 27 vulnerabilities such as privilege escalation, command injection, authorisation bypass, cross-site scripting, denial of service, XML injection, information disclosure, and client-side request smuggling. A remote, unauthenticated attacker could exploit some of these vulnerabilities to take control of an affected system.


Remediation advice

Affected organisations are encouraged to review November 2022 Cisco ASA, FMC, and FTD Software Security Advisory bundled publication and the following Cisco Security Advisories and apply the necessary updates or workarounds.


Remediation steps

Type Step
Patch

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability| cisco-sa-asa-ftd-dap-dos-GhYZBxDU


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-dap-dos-GhYZBxDU
Patch

Cisco Firepower Threat Defense Software Generic Routing Encapsulation Denial of Service Vulnerability | cisco-sa-ftd-gre-dos-hmedHQPM


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-gre-dos-hmedHQPM
Patch

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability | cisco-sa-asaftd-snmp-dos-qsqBNM6x


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-snmp-dos-qsqBNM6x
Patch

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability | cisco-sa-ssl-client-dos-cCrQPkA


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssl-client-dos-cCrQPkA
Patch

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability | cisco-sa-asafdt-webvpn-dos-tzPSYern


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asafdt-webvpn-dos-tzPSYern
Patch

Cisco Firepower Management Center and Firepower Threat Defense Software SSH Denial of Service Vulnerability | cisco-sa-fmc-dos-OwEunWJN


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-dos-OwEunWJN
Patch

Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability | cisco-sa-fmcsfr-snmp-access-6gqgtJ4S


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmcsfr-snmp-access-6gqgtJ4S
Patch

Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability | cisco-sa-fw3100-secure-boot-5M8mUh26


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fw3100-secure-boot-5M8mUh26
Patch

Cisco Firepower Threat Defense Software Privilege Escalation Vulnerability | cisco-sa-ftd-mgmt-privesc-7GqR2th


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-mgmt-privesc-7GqR2th
Patch

Cisco Firepower Management Center Software Command Injection Vulnerabilities | cisco-sa-fmc-cmd-inj-Z3B5MY35


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-Z3B5MY35
Patch

Cisco Firepower Threat Defense Software and Cisco FXOS Software Command Injection Vulnerability | cisco-sa-ftd-fxos-cmd-inj-Q9bLNsrK


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-fxos-cmd-inj-Q9bLNsrK
Patch

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability | 

cisco-sa-asa-ftd-vp-authz-N2GckjN6


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-vp-authz-N2GckjN6
Patch

Cisco Firepower Threat Defense Software SIP and Snort 3 Detection Engine Denial of Service Vulnerability | cisco-sa-ftdsnort3sip-dos-A4cHeArC


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdsnort3sip-dos-A4cHeArC
Patch

Multiple Cisco Products Snort SMB2 Detection Engine Policy Bypass and Denial of Service Vulnerabilities | cisco-sa-snort-smb-3nfhJtr


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-smb-3nfhJtr
Patch

Cisco Firepower Management Center Software Information Disclosure Vulnerability | cisco-sa-fmc-info-disc-UghNRRhP


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-info-disc-UghNRRhP
Patch

Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack Vulnerability | cisco-sa-ftd-tls-bb-rCgtmY2


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-bb-rCgtmY2
Patch

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | cisco-sa-fmc-xss-LATZYzxs


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-LATZYzxs
Patch

Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Client-Side Request Smuggling Vulnerability | cisco-sa-asa-webvpn-LOeKsNmO


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-webvpn-LOeKsNmO
Patch

Cisco Firepower Management Center Software XML External Entity Injection Vulnerability | cisco-sa-fmc-xxe-MzPC4bYd


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xxe-MzPC4bYd


Last edited: 10 November 2022 3:23 pm