CVE-2019-1832: Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability
First published: Thu May 16 2019(Updated: )
A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by sending crafted ICMP packets to the affected device. A successful exploit could allow the attacker to bypass configured access control policies.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Firewall Management Center | =6.2.0 | |
| Cisco Secure Firewall Management Center | =6.2.0.5 | |
| Cisco Secure Firewall Management Center | =6.2.3 | |
| Cisco Secure Firewall Management Center | =6.2.3.1 | |
| Cisco Secure Firewall Management Center | =6.2.3.2 | |
| Cisco Secure Firewall Management Center | =6.4.0 | |
| Cisco Firepower Management Center Software | =6.2.0 | |
| Cisco Firepower Management Center Software | =6.2.0.5 | |
| Cisco Firepower Management Center Software | =6.2.3 | |
| Cisco Firepower Management Center Software | =6.2.3.1 | |
| Cisco Firepower Management Center Software | =6.2.3.2 | |
| Cisco Firepower Management Center Software | =6.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-1832?
CVE-2019-1832 is rated as high severity due to its potential to allow unauthorized access.
How do I fix CVE-2019-1832?
To fix CVE-2019-1832, upgrade to a version of Cisco Firepower Threat Defense Software that addresses the vulnerability.
What systems are affected by CVE-2019-1832?
CVE-2019-1832 affects multiple versions of Cisco Secure Firewall Management Center and Cisco Firepower Management Center Software.
What type of attack can exploit CVE-2019-1832?
An unauthenticated remote attacker can exploit CVE-2019-1832 by sending specially crafted ICMP packets.
What is the primary cause of the vulnerability CVE-2019-1832?
The primary cause of CVE-2019-1832 is improper validation of ICMP packets in the detection engine of Cisco Firepower Threat Defense Software.
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/title
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/event
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure firewall management center
- version/cisco secure firewall management center/6.2.0
- version/cisco secure firewall management center/6.2.0.5
- version/cisco secure firewall management center/6.2.3
- version/cisco secure firewall management center/6.2.3.1
- version/cisco secure firewall management center/6.2.3.2
- version/cisco secure firewall management center/6.4.0
- canonical/cisco firepower management center software
- version/cisco firepower management center software/6.2.0
- version/cisco firepower management center software/6.2.0.5
- version/cisco firepower management center software/6.2.3
- version/cisco firepower management center software/6.2.3.1
- version/cisco firepower management center software/6.2.3.2
- version/cisco firepower management center software/6.4.0