Lucene search

[email protected]CVE-2019-12696

HistoryOct 02, 2019 - 7:15 p.m.

CVE-2019-12696

2019-10-0219:15:13

CWE-693

[email protected]

web.nvd.nist.gov

cisco

firepower

system software

detection engine

vulnerabilities

rtf

rar

nvd

cve-2019-12696

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

NVD

Node

ciscofirepowerMatch6.2.3.1

ciscofirepowerMatch6.2.3.7

ciscofirepowerMatch6.3.0

ciscofirepowerMatch6.4.0

AND

ciscoasa_5500-xMatch-

ciscofirepower_1010Match-

ciscofirepower_1120Match-

ciscofirepower_1140Match-

ciscofirepower_2110Match-

ciscofirepower_2120Match-

ciscofirepower_2130Match-

ciscofirepower_2140Match-

ciscofirepower_4110Match-

ciscofirepower_4115Match-

ciscofirepower_4120Match-

ciscofirepower_4125Match-

ciscofirepower_4140Match-

ciscofirepower_4145Match-

ciscofirepower_4150Match-

ciscofirepower_7000Match-

ciscofirepower_8000Match-

ciscofirepower_9300Match-

ciscofirepower_threat_defense_for_isrMatch-

ciscoftd_virtualMatch-

ciscoisa_3000Match-

ciscongipsv_for_vmwareMatch-

CPENameOperatorVersion
cisco:firepowercisco firepowereq6.2.3.1
cisco:firepowercisco firepowereq6.2.3.7
cisco:firepowercisco firepowereq6.3.0
cisco:firepowercisco firepowereq6.4.0

CPE	Name	Operator	Version
cisco:firepower	cisco firepower	eq	6.2.3.1
cisco:firepower	cisco firepower	eq	6.2.3.7
cisco:firepower	cisco firepower	eq	6.3.0
cisco:firepower	cisco firepower	eq	6.4.0

CNA Affected

[
  {
    "product": "Cisco FireSIGHT System Software ",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-firepwr-bypass

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

Related for CVE-2019-12696

nvd1 cvelist1 prion1 nessus1 cisco1