Threats tagged 'cisco'

This vulnerability affects Cisco Secure Firewall ASA Software and Secure Firewall Threat Defense (FTD) Software when specific remote access VPN features are enabled. The affected configurations include AnyConnect IKEv2 Remote Access with client services, Mobile User Security (MUS), and SSL VPN features that enable SSL listen sockets. The vulnerability impacts Cisco devices running versions 9.8, 9.8.1, and 9.8.1.5 of these software products. No CVSS score or detailed impact information is provided in the source data.

CVE-2025-20333 is a vulnerability affecting Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software when certain remote access VPN features are enabled. The vulnerability involves SSL listen sockets being enabled under specific configurations related to AnyConnect IKEv2 Remote Access, Mobile User Security, and SSL VPN features. The affected versions are 9.8, 9.8.1, and 9.8.1.5. This issue requires the presence of vulnerable configurations to be exploitable.

This vulnerability affects multiple Cisco products including Secure Firewall ASA Software, Secure Firewall FTD Software, IOS Software, IOS XE Software, and IOS XR Software (32-bit) running on ASR 9001 routers with specific configurations enabled. The vulnerability is related to configurations that enable SSL listen sockets or HTTP server features, such as Remote Access SSL VPN or HTTP server on affected devices. Determining vulnerability depends on checking device configurations for these features. No CVSS score or exploit in the wild is currently known.

Cisco Identity Services Engine (ISE) is affected by stored cross-site scripting (XSS) vulnerabilities that impact the product regardless of device configuration. The advisory references fixed software versions for remediation but does not specify them in the provided data.