CVE-2019-1970
Description
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors when handling specific SSL/TLS messages. An attacker could exploit this vulnerability by sending crafted HTTP packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured file policies and deliver a malicious payload to the protected network.
How to fix
- cisco secure_firewall_threat_defense6.4.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure_firewall_management_center | 6.3.0, 6.4.0 | — |
| cisco secure_firewall_threat_defense | v < 6.4.1 | 6.4.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.