PT-2019-1289 · Cisco · Cisco Ftd

Published 2019-01-23 · Updated 2019-10-09 · CVE-2019-1669

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the data acquisition (DAQ) component could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service (DoS) condition. The issue exists because the software improperly manages system memory resources when inspecting traffic. An attacker could exploit this by generating specific traffic patterns for the software to inspect, potentially exhausting system memory resources used for traffic inspection. Depending on the configuration, the software could fail open and cease to inspect traffic or fail closed and result in a DoS condition. This may require manual intervention to restore the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2019-00483

CVE-2019-1669

Affected Products

Cisco Ftd

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-firepowertds-bypass · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1669 · Security Note
• https://bdu.fstec.ru/vul/2019-00483 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1669 · Vendor Advisory
• http://securityfocus.com/bid/106721 · Note