CVE-2019-12701

Medium

Description

A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass the file and malware inspection policies on an affected system. The vulnerability exists because the affected software insufficiently validates incoming traffic. An attacker could exploit this vulnerability by sending a crafted HTTP request through an affected device. A successful exploit could allow the attacker to bypass the file and malware inspection policies and send malicious traffic through the affected device.

SeverityMedium
CVSS5.8
Exploit probability—
ProductCisco Secure Firewall Management Center
PublishedOct 2, 2019
First seenOct 2, 2019

How to fix

Update
  • cisco vdb_fingerprint_database327 or later

Affected products

ProductAffected versionsFixed in
cisco secure_firewall_management_centerNo range specified—
cisco vdb_fingerprint_databasev < 327327

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.