CVE-2019-1700: Cisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge Denial of Service Vulnerability
First published: Thu Feb 21 2019(Updated: )
A vulnerability in field-programmable gate array (FPGA) ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module (PID: FPR9K-DNM-2X100G) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. Manual intervention may be required before a device will resume normal operations. The vulnerability is due to a logic error in the FPGA related to the processing of different types of input packets. An attacker could exploit this vulnerability by being on the adjacent subnet and sending a crafted sequence of input packets to a specific interface on an affected device. A successful exploit could allow the attacker to cause a queue wedge condition on the interface. When a wedge occurs, the affected device will stop processing any additional packets that are received on the wedged interface. Version 2.2 is affected.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower 9000 Firmware | =2.2\(200.8\) | |
| Cisco Firepower 9000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco Firepower 9000 Series vulnerability?
The vulnerability ID is CVE-2019-1700.
What is the severity level of CVE-2019-1700?
The severity level of CVE-2019-1700 is medium.
How does CVE-2019-1700 affect Cisco Firepower 9000 Series?
CVE-2019-1700 could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition in Cisco Firepower 9000 Series.
Is Cisco Firepower 9000 firmware version 2.2 (200.8) affected by CVE-2019-1700?
Yes, Cisco Firepower 9000 firmware version 2.2 (200.8) is affected by CVE-2019-1700.
How can I fix CVE-2019-1700?
To fix CVE-2019-1700, apply the necessary updates and patches provided by Cisco.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco firepower 9000 firmware
- version/cisco firepower 9000 firmware/2.2\(200.8\)
- canonical/cisco firepower 9000