PT-2019-3817 · Cisco · Cisco Firepower Management Center

Published 2019-10-02 · Updated 2024-11-26 · CVE-2019-12701

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (FMC) Software (affected versions not specified)

Description The issue exists due to insufficient validation of incoming traffic, allowing a remote attacker to bypass file and malware inspection policies by sending a specially crafted HTTP request through the affected device. This could enable the attacker to send malicious traffic through the device, potentially compromising its security.

Recommendations For all affected versions, consider restricting access to the file and malware inspection feature until a patch is available. As a temporary workaround, consider disabling the feature that allows incoming traffic to bypass inspection policies. Avoid using the affected device to inspect files and malware until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-04144

CVE-2019-12701

Affected Products

Cisco Firepower Management Center

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fire-bypass · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12701 · Security Note
• https://bdu.fstec.ru/vul/2019-04144 · Security Note