The vulnerability of the LDAP protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service failure.

🗓️ 31 May 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

LDAP vulnerability in Cisco ASA and FTD due to input validation can cause service interruption.

Reporter	Title	Published	Views	Family All 11
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability	1 May 201916:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability (cisco-sa-20190501-asa-ftds-ldapdos)	29 May 202000:00	–	nessus
Tenable Nessus	Cisco Adaptive Security Appliance Software Lightweight Directory Access Protocol Denial of Service Vulnerability (cisco-sa-20190501-asa-ftds-ldapdos)	29 May 202000:00	–	nessus
CVE	CVE-2019-1697	3 May 201915:15	–	cve
Cvelist	CVE-2019-1697 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability	3 May 201915:15	–	cvelist
EUVD	EUVD-2019-10254	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1697	3 May 201916:29	–	nvd
OSV	CVE-2019-1697	3 May 201916:29	–	osv
Prion	Design/Logic Flaw	3 May 201916:29	–	prion
Positive Technologies	PT-2019-2118 · Cisco · Cisco Asa +1	1 May 201900:00	–	ptsecurity

Vulners

Node

cisco_systems firepower_threat_defenseRange6.2.1–6.2.3.12

OR

cisco_systems adaptive_security_applianceRange9.10–9.10.1.17

OR

cisco_systems firepower_threat_defenseRange6.3.0–6.3.0.3

OR

cisco_systems adaptive_security_applianceRange9.6–9.6.4.25

OR

cisco_systems adaptive_security_applianceRange9.7–9.8.4

OR

cisco_systems adaptive_security_applianceRange9.9–9.9.2.50

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-ftds-ldapdos
securityfocus	www.securityfocus.com/bid/108182
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-1697
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25.4

CVSS 36.8

EPSS0.00497

LDAP protocol Adaptive Security Appliance Firepower Threat Defense Improper input validation Service interruption Cisco