Cisco Secure Firewall Threat Defense Software Authenticated Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Cisco Secure Firewall Threat Defense (FTD) Software. This issue allows an authenticated, local attacker with low privileges to cause the device to unexpectedly reload, leading to a DoS condition. The vulnerability arises from improper validation of user-supplied input, which an attacker could exploit by using crafted commands at the CLI prompt.

Impact

Exploitation of this vulnerability causes the device to reload unexpectedly, creating a denial-of-service condition.

Remediation

Cisco has released software updates to address this vulnerability. For instructions on upgrading a Cisco Secure FTD device, refer to the appropriate Cisco Secure FMC upgrade guide.