PT-2019-3392 · Cisco · Cisco Asa+1

Published 2019-10-02 · Updated 2023-08-16 · CVE-2019-12673

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security (ASA) Software (affected versions not specified) Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the FTP inspection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to insufficient validation of FTP data. An attacker could exploit this by sending malicious FTP traffic through an affected device, potentially causing a DoS condition. The vulnerability may also be related to a buffer overflow in memory, which could be exploited using specially crafted FTP packets.

Recommendations For Cisco Adaptive Security (ASA) Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Cisco Firepower Threat Defense (FTD) Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

RCE

Weakness Enumeration

CWE-119

CWE-20

Related Identifiers

BDU:2019-03533

CVE-2019-12673

Affected Products

Cisco Asa

Cisco Ftd

References · 4

• https://osv.dev/vulnerability/CVE-2019-12673 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03533 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-12673 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-dos · Vendor Advisory