QID 316957

A vulnerability in the web services interface of Cisco Firepower Threat Defense (FTD) Software
could allow an authenticated, remote attacker to cause a buffer overflow on an affected system.

Affected Products
Cisco products if they are running a vulnerable release of FTD Software and
have a vulnerable AnyConnect VPN or WebVPN configuration.
Earlier than 6.2.2 Prior to 6.4.0.12(May 2021)
From 6.5.0 Prior to 6.6.32
From 6.7.0 Prior to 6.7.0.1
Note: Potential detection as cannot confirm if target have a vulnerable AnyConnect VPN or WebVPN configuration.

QID detection logic:
The QID checks for Cisco FTD version retrieved via Unix Auth using "show version" command.

A successful exploit could allow the attacker to cause a buffer overflow condition on the affected system,
which could disclose data fragments or cause the device to reload,
resulting in a denial of service (DoS) condition.