The vulnerability of Cisco Firepower Management Center (FMC) software lies in its susceptibility to attacks due to insufficient checks on incoming traffic. This allows attackers to bypass virus checklists and malware policies, and send malicious traffic through the vulnerable device.

🗓️ 19 Nov 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Cisco Firepower Management Center vulnerability: insufficient traffic checks allow bypassing virus policies and sending malicious requests.

Reporter	Title	Published	Views	Family All 12
Cisco	Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability	2 Oct 201916:00	–	cisco
Tenable Nessus	Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability (cisco-sa-20191002-fire-bypass)	1 Nov 201900:00	–	nessus
CNVD	Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2019-40785)	11 Nov 201900:00	–	cnvd
CVE	CVE-2019-12701	2 Oct 201919:06	–	cve
Cvelist	CVE-2019-12701 Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability	2 Oct 201919:06	–	cvelist
EUVD	EUVD-2019-4292	7 Oct 202500:30	–	euvd
NVD	CVE-2019-12701	2 Oct 201919:15	–	nvd
OSV	CVE-2019-12701	2 Oct 201919:15	–	osv
Prion	Design/Logic Flaw	2 Oct 201919:15	–	prion
Positive Technologies	PT-2019-3817 · Cisco · Cisco Firepower Management Center	2 Oct 201900:00	–	ptsecurity

Vulners

Node

cisco_systems vdb_fingerprint_databaseRange<327

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fire-bypass
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-12701
nvd	www.nvd.nist.gov/vuln/detail

19 Nov 2019 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25

CVSS 35.8

EPSS0.00074

Cisco Firepower Management Center insufficient traffic checks policy bypass malicious traffic crafted request