The vulnerability of the NULL character detection function in Cisco Firepower Threat Defense’s network interface controllers, as well as in Cisco FirePOWER Services Software for ASA and Cisco Firepower Management Center’s network management software, allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

🗓️ 13 Sep 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

NULL character detection flaw in Cisco Firepower products bypasses filters and impairs integrity.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2019-1981	4 Feb 202410:41	–	circl
Cisco	Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability	16 Aug 201916:00	–	cisco
CNVD	Multiple Cisco Products Privilege License and Access Control Issues Vulnerability (CNVD-2020-00293)	14 Nov 201900:00	–	cnvd
CVE	CVE-2019-1981	5 Nov 201919:35	–	cve
Cvelist	CVE-2019-1981 Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability	5 Nov 201919:35	–	cvelist
EUVD	EUVD-2019-10538	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1981	5 Nov 201920:15	–	nvd
OSV	CVE-2019-1981	5 Nov 201920:15	–	osv
Prion	Design/Logic Flaw	5 Nov 201920:15	–	prion
Positive Technologies	PT-2019-3168 · Cisco · Cisco Firepower Services Software For Asa +2	16 Aug 201900:00	–	ptsecurity

Vulners

Node

cisco_systems cisco_firepower_management_centerMatch2.9.12

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12-opensrc

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.1

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.12

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.13

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.14

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.15

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.2

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.3

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.4

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.5

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.6

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.7

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.8

OR

cisco_systems cisco_firepower_management_centerMatch2.9.12.9

OR

cisco_systems cisco_firepower_management_centerMatch2.9.13

OR

cisco_systems cisco_firepower_management_centerMatch2.9.13.1

OR

cisco_systems cisco_firepower_management_centerMatch2.9.13.2

OR

cisco_systems cisco_firepower_management_centerMatch2.9.13.3

OR

cisco_systems cisco_firepower_management_centerMatch2.9.13.4

OR

cisco_systems cisco_firepower_management_centerMatch2.9.13.5

OR

cisco_systems cisco_firepower_management_centerMatch2.9.13.6

OR

cisco_systems cisco_firepower_management_centerMatch2.9.14.0

OR

cisco_systems cisco_firepower_management_centerMatch2.9.14.2

OR

cisco_systems cisco_firepower_management_centerMatch2.9.14.3

OR

cisco_systems cisco_firepower_management_centerMatch2.9.14.4

OR

cisco_systems cisco_firepower_management_centerMatch2.9.14.5

OR

cisco_systems cisco_firepower_management_centerMatch2.9.15

OR

cisco_systems cisco_firepower_management_centerMatch2.9.16

OR

cisco_systems cisco_firepower_management_centerMatch2.9.16.0

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-null
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 25

CVSS 35.8

EPSS0.01042

Cisco Firepower NULL character detection content filters bypass integrity risk firepower management center network interface