cisco-sa-20190501-frpwr-smb-snort: Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities
First published: Wed May 01 2019(Updated: )
Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-frpwr-smb-snort
Credit: These vulnerabilities were found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco FTD Software | =6.2.3<6.2.3.12=6.2.2<6.2.3.12=6.2.1<6.2.3.12=6.2.0<6.2.3.12=6.1.0<6.2.3.12=6.0.1<6.2.3.12=6.0<6.2.3.12 | 6.2.3.12 6.2.3.12 6.2.3.12 6.2.3.12 6.2.3.12 6.2.3.12 6.2.3.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20190501-frpwr-smb-snort?
The severity of cisco-sa-20190501-frpwr-smb-snort is critical due to potential denial of service conditions.
How do I fix cisco-sa-20190501-frpwr-smb-snort?
To fix cisco-sa-20190501-frpwr-smb-snort, upgrade to a patched version of Cisco FTD Software, such as 6.2.3.13 or later.
What types of attacks can cisco-sa-20190501-frpwr-smb-snort help prevent?
cisco-sa-20190501-frpwr-smb-snort vulnerabilities can allow unauthenticated attackers to exploit the SMB protocol for denial of service attacks.
Which versions of Cisco FTD Software are affected by cisco-sa-20190501-frpwr-smb-snort?
Cisco FTD Software versions 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.0, and 6.0.x are affected by cisco-sa-20190501-frpwr-smb-snort.
How can I determine if my system is vulnerable to cisco-sa-20190501-frpwr-smb-snort?
You can determine if your system is vulnerable to cisco-sa-20190501-frpwr-smb-snort by checking the version of Cisco FTD Software you are running and comparing it to the affected versions.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/title
- agent/description
- agent/event
- agent/tags
- agent/source
- vendor/cisco
- canonical/cisco ftd software
- version/cisco ftd software/6.2.3
- version/cisco ftd software/6.2.2
- version/cisco ftd software/6.2.1
- version/cisco ftd software/6.2.0
- version/cisco ftd software/6.1.0
- version/cisco ftd software/6.0.1
- version/cisco ftd software/6.0