PT-2019-1289 · Cisco · Cisco Ftd

Publicado 2019-01-23 · Atualizado 2019-10-09 · CVE-2019-1669

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the data acquisition (DAQ) component could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service (DoS) condition. The issue exists because the software improperly manages system memory resources when inspecting traffic. An attacker could exploit this by generating specific traffic patterns for the software to inspect, potentially exhausting system memory resources used for traffic inspection. Depending on the configuration, the software could fail open and cease to inspect traffic or fail closed and result in a DoS condition. This may require manual intervention to restore the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-693

Identificadores relacionados

BDU:2019-00483

CVE-2019-1669

Produtos afetados

Cisco Ftd

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-firepowertds-bypass · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-1669 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00483 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1669 · Aviso do Fabricante
• http://securityfocus.com/bid/106721 · Nota