CVE-2019-12697CWE-693

Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities

Medium · published October 2, 2019

CVSS v3.0
5.8
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.0
5.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01455 · 73.3th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2019-10-02T19:06Z
EPSS history
Timeline
  • 02 OCT 19:06Z
    Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities
    cvelistv5