PT-2019-2291 · Cisco · Cisco Firepower Management Center+1

CVE-2019-1832 · Publicado 2019-05-15 · Atualizado 2024-11-26

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (affected versions not specified) Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description The issue is related to improper validation of ICMP packets, which could allow a remote attacker to bypass existing access control policies. An attacker could exploit this by sending crafted ICMP packets to the affected device, potentially allowing them to bypass configured access control policies.

Recommendations For Cisco Firepower Management Center, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Cisco Firepower Threat Defense (FTD) Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-693

Identificadores relacionados

BDU:2019-02062

CVE-2019-1832

Produtos afetados

Cisco Firepower Management Center

Cisco Ftd

Referências · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-ftdde-poly-bypass · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-1832 · Nota de Segurança
• http://securityfocus.com/bid/108340 · Nota
• https://osv.dev/vulnerability/CVE-2019-1832 · Aviso do Fabricante
• https://cvedetails.com/cve/CVE-2019-1832 · Nota
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvk43854 · Nota
• https://bdu.fstec.ru/vul/2019-02062 · Nota de Segurança