The vulnerability of the WebVPN function in Cisco Adaptive Security Appliance and Firepower Threat Defense micro-programming systems allows a perpetrator to induce a service failure.

🗓️ 19 Nov 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

WebVPN flaw in Cisco ASA and Firepower microcode can cause service failure when loading WebVPN page.

Reporter	Title	Published	Views	Family All 11
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CPU Denial of Service Vulnerability	2 Oct 201916:00	–	cisco
CNVD	Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Resource Management Error Vulnerability	5 Nov 201900:00	–	cnvd
CVE	CVE-2019-12698	2 Oct 201919:06	–	cve
Cvelist	CVE-2019-12698 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CPU Denial of Service Vulnerability	2 Oct 201919:06	–	cvelist
EUVD	EUVD-2019-4289	7 Oct 202500:30	–	euvd
NVD	CVE-2019-12698	2 Oct 201919:15	–	nvd
OSV	CVE-2019-12698	2 Oct 201919:15	–	osv
Prion	Design/Logic Flaw	2 Oct 201919:15	–	prion
Positive Technologies	PT-2019-3822 · Cisco · Cisco Ftd +1	2 Oct 201900:00	–	ptsecurity
Symantec	Multiple Cisco Products CVE-2019-12698 Denial of Service Vulnerability	2 Oct 201900:00	–	symantec

Vulners

Node

cisco_systems adaptive_security_applianceRange9.10–9.10.1.30

OR

cisco_systems adaptive_security_applianceRange<9.6.4.31

OR

cisco_systems adaptive_security_applianceRange9.7–9.8.4.9

OR

cisco_systems adaptive_security_applianceRange9.9–9.9.2.56

OR

cisco_systems adaptive_security_applianceRange9.12–9.12.2.9

OR

cisco_systems adaptive_security_applianceRange9.13–9.13.1

OR

cisco_systems firepower_threat_defenseRange6.1.0–6.2.3.15

OR

cisco_systems firepower_threat_defenseRange6.3.0–6.3.0.5

OR

cisco_systems firepower_threat_defenseRange6.4.0–6.4.0.6

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ftd-dos
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-12698
nvd	www.nvd.nist.gov/vuln/detail

19 Nov 2019 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25

CVSS 35.3

EPSS0.00436

webvpn flaw cisco asa firepower threat defense microcode vulnerability resource consumption service failure loading webvpn page