CVE-2019-1832: Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability
A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by sending crafted ICMP packets to the affected device. A successful exploit could allow the attacker to bypass configured access control policies.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1832?
CVE-2019-1832 is rated as high severity due to its potential to allow unauthorized access.
How do I fix CVE-2019-1832?
To fix CVE-2019-1832, upgrade to a version of Cisco Firepower Threat Defense Software that addresses the vulnerability.
What systems are affected by CVE-2019-1832?
CVE-2019-1832 affects multiple versions of Cisco Secure Firewall Management Center and Cisco Firepower Management Center Software.
What type of attack can exploit CVE-2019-1832?
An unauthenticated remote attacker can exploit CVE-2019-1832 by sending specially crafted ICMP packets.
What is the primary cause of the vulnerability CVE-2019-1832?
The primary cause of CVE-2019-1832 is improper validation of ICMP packets in the detection engine of Cisco Firepower Threat Defense Software.