CVE-2019-1970: Cisco Firepower Threat Defense Software File Policy Bypass Vulnerability
First published: Thu Aug 08 2019(Updated: )
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors when handling specific SSL/TLS messages. An attacker could exploit this vulnerability by sending crafted HTTP packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured file policies and deliver a malicious payload to the protected network.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Firewall Threat Defense | <6.4.1 | |
| Cisco Secure Firewall Management Center | =6.3.0 | |
| Cisco Secure Firewall Management Center | =6.4.0 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.3.0 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-1970?
CVE-2019-1970 is classified as a high-severity vulnerability.
How do I fix CVE-2019-1970?
To fix CVE-2019-1970, you should apply the latest security patches provided by Cisco for the affected software versions.
Who is affected by CVE-2019-1970?
CVE-2019-1970 affects users of Cisco Firepower Threat Defense Software and other specific Cisco firewall management solutions.
What could an attacker do with CVE-2019-1970?
An attacker exploiting CVE-2019-1970 could bypass file policies on affected systems, potentially compromising security.
When was CVE-2019-1970 reported?
CVE-2019-1970 was reported on August 7, 2019.
- agent/type
- agent/severity
- agent/references
- agent/weakness
- agent/title
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco secure firewall threat defense
- canonical/cisco secure firewall management center
- version/cisco secure firewall management center/6.3.0
- version/cisco secure firewall management center/6.4.0
- canonical/cisco firepower management center (fmc) and firepower threat defense (ftd) software
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.3.0
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.4.0