6.5

CVE-2026-20064

A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition.

 This vulnerability is due to improper validation of user-supplied input. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.10
Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.11
Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.12
Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.13
Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.14
Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.15
Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.16
Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.17
Cisco ≫ Secure Firewall Threat Defense Version 6.4.0.18
Cisco ≫ Secure Firewall Threat Defense Version 7.2.10.2
Cisco ≫ Secure Firewall Threat Defense Version 7.7.10.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.01
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 6.5 2 4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf
Vendor Advisory