PT-2019-3392 · Cisco · Cisco Asa+1
CVE-2019-12673
·
Publicado
2019-10-02
·
Atualizado
2023-08-16
CVSS v3.1
8.6
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Cisco Adaptive Security (ASA) Software (affected versions not specified)
Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)
Description
A vulnerability in the FTP inspection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to insufficient validation of FTP data. An attacker could exploit this by sending malicious FTP traffic through an affected device, potentially causing a DoS condition. The vulnerability may also be related to a buffer overflow in memory, which could be exploited using specially crafted FTP packets.
Recommendations
For Cisco Adaptive Security (ASA) Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Cisco Firepower Threat Defense (FTD) Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Buffer Overflow
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cisco Asa
Cisco Ftd