PT-2019-2776 · Cisco · Firepower Threat Defense+1

Publicado 2019-07-10 · Atualizado 2020-10-16 · CVE-2019-1873

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance Software (ASA) and Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the cryptographic driver could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly due to incomplete input validation of a Secure Sockets Layer (SSL) or Transport Layer Security (TLS) ingress packet header. An attacker could exploit this vulnerability by sending a crafted TLS/SSL packet to an interface on the targeted device, resulting in a denial of service (DoS) condition. This vulnerability affects systems configured in routed and transparent firewall mode and in single or multiple context mode, and can be triggered by IPv4 and IPv6 traffic. A valid SSL or TLS session is required to exploit this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Enumeração de Fraquezas

CWE-400

CWE-20

Identificadores relacionados

BDU:2019-02723

CVE-2019-1873

Produtos afetados

Cisco Asa

Firepower Threat Defense

Referências · 5

• http://securityfocus.com/bid/109123 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1873 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1873 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190710-asa-ftd-dos · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02723 · Nota de Segurança