PT-2019-1502 · Cisco · Cisco Firepower 9000 Series

Publicado 2019-02-20 · Atualizado 2019-10-09 · CVE-2019-1700

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower 9000 Series version 2.2

Description A logic error in the field-programmable gate array (FPGA) related to the processing of different types of input packets could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. An attacker could exploit this by sending a crafted sequence of input packets to a specific interface on an affected device, causing a queue wedge condition on the interface, which would stop the device from processing any additional packets received on the wedged interface.

Recommendations For version 2.2, manual intervention may be required to resume normal operations after a successful exploit. As a temporary workaround, consider restricting access to the affected interface until a fix is available.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2019-00944

CVE-2019-1700

Produtos afetados

Cisco Firepower 9000 Series

Referências · 5

• http://securityfocus.com/bid/107105 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1700 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190220-firpwr-dos · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-1700 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-00944 · Nota de Segurança