Lucene search

K
cve[email protected]CVE-2019-1700
HistoryFeb 21, 2019 - 9:29 p.m.

CVE-2019-1700

2019-02-2121:29:00
CWE-399
web.nvd.nist.gov
27
vulnerability
cisco
firepower
fpga
denial of service
nvd
cve-2019-1700

6.1 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

5.7 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

27.1%

A vulnerability in field-programmable gate array (FPGA) ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module (PID: FPR9K-DNM-2X100G) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. Manual intervention may be required before a device will resume normal operations. The vulnerability is due to a logic error in the FPGA related to the processing of different types of input packets. An attacker could exploit this vulnerability by being on the adjacent subnet and sending a crafted sequence of input packets to a specific interface on an affected device. A successful exploit could allow the attacker to cause a queue wedge condition on the interface. When a wedge occurs, the affected device will stop processing any additional packets that are received on the wedged interface. Version 2.2 is affected.

Affected configurations

NVD
Node
ciscofirepower_9000_firmwareMatch2.2\(200.8\)
AND
ciscofirepower_9000Match-

CNA Affected

[
  {
    "product": "Cisco Firepower Extensible Operating System (FXOS) ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "2.2"
      }
    ]
  }
]

6.1 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

5.7 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

27.1%

Related for CVE-2019-1700