PT-2019-1502 · Cisco · Cisco Firepower 9000 Series

Published 2019-02-20 · Updated 2019-10-09 · CVE-2019-1700

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower 9000 Series version 2.2

Description A logic error in the field-programmable gate array (FPGA) related to the processing of different types of input packets could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. An attacker could exploit this by sending a crafted sequence of input packets to a specific interface on an affected device, causing a queue wedge condition on the interface, which would stop the device from processing any additional packets received on the wedged interface.

Recommendations For version 2.2, manual intervention may be required to resume normal operations after a successful exploit. As a temporary workaround, consider restricting access to the affected interface until a fix is available.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2019-00944

CVE-2019-1700

Affected Products

Cisco Firepower 9000 Series

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-1700 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190220-firpwr-dos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-1700 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00944 · Security Note
• http://securityfocus.com/bid/107105 · Note