PT-2019-3172 · Cisco · Cisco Ftd

Published 2019-08-07 · Updated 2024-11-26 · CVE-2019-1970

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The issue is due to errors when handling specific SSL/TLS messages. An attacker could exploit this by sending crafted HTTP packets that would flow through an affected system, potentially allowing the attacker to bypass the configured file policies and deliver a malicious payload to the protected network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2019-03161

CVE-2019-1970

Affected Products

Cisco Ftd

References · 4

• https://bdu.fstec.ru/vul/2019-03161 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190807-ftd-bypass · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1970 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1970 · Vendor Advisory