PT-2019-2776 · Cisco · Firepower Threat Defense+1

Published 2019-07-10 · Updated 2020-10-16 · CVE-2019-1873

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance Software (ASA) and Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the cryptographic driver could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly due to incomplete input validation of a Secure Sockets Layer (SSL) or Transport Layer Security (TLS) ingress packet header. An attacker could exploit this vulnerability by sending a crafted TLS/SSL packet to an interface on the targeted device, resulting in a denial of service (DoS) condition. This vulnerability affects systems configured in routed and transparent firewall mode and in single or multiple context mode, and can be triggered by IPv4 and IPv6 traffic. A valid SSL or TLS session is required to exploit this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

BDU:2019-02723

CVE-2019-1873

Affected Products

Cisco Asa

Firepower Threat Defense

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-1873 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1873 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190710-asa-ftd-dos · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02723 · Security Note
• http://securityfocus.com/bid/109123 · Note