CVE-2019-12701CWE-20

Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability

Medium · published October 2, 2019

CVSS v3.0
5.8
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass the file and malware inspection policies on an affected system. The vulnerability exists because the affected software insufficiently validates incoming traffic. An attacker could exploit this vulnerability by sending a crafted HTTP request through an affected device. A successful exploit could allow the attacker to bypass the file and malware inspection policies and send malicious traffic through the affected device.

The record
Technical detail
CVSS v3.0
5.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01493 · 73.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2019-10-02T19:06Z
EPSS history
Timeline
  • 02 OCT 19:06Z
    Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability
    cvelistv5