cisco-sa-20191002-asa-dos: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability
A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of FTP data. An attacker could exploit this vulnerability by sending malicious FTP traffic through an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-dos
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20191002-asa-dos?
The severity of cisco-sa-20191002-asa-dos is classified as high due to its potential to allow a denial of service condition.
How do I fix cisco-sa-20191002-asa-dos?
To fix cisco-sa-20191002-asa-dos, upgrade to the fixed versions of Cisco ASA Software or Cisco FTD Software as specified in the advisory.
What devices are affected by cisco-sa-20191002-asa-dos?
Devices affected by cisco-sa-20191002-asa-dos include Cisco ASA Software versions earlier than 9.12.2.52 and Cisco FTD Software versions earlier than 6.3.0.5.
What type of attack does cisco-sa-20191002-asa-dos facilitate?
cisco-sa-20191002-asa-dos facilitates a denial of service (DoS) attack that can cause the affected device to become unresponsive.
Can an authenticated user exploit cisco-sa-20191002-asa-dos?
No, cisco-sa-20191002-asa-dos can be exploited by an unauthenticated remote attacker.