CVE-2019-1696CWE-400denial-of-service

CVE-2019-1696

High · published May 3, 2019

CVSS v3.0
7.5
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01799 · 78.3th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2019-05-03T19:29Z
Affected products (7)
ProductVersionsFixed in
cisco/secure_firewall_management_centerall versions—
cisco/secure_firewall_management_centerall versions—
cisco/secure_firewall_management_centerall versions—
cisco/secure_firewall_management_centerall versions—
cisco/secure_firewall_management_centerall versions—
cisco/secure_firewall_management_centerall versions—
cisco/secure_firewall_threat_defense≥ 6.0.0, < 6.2.3.126.2.3.12
References (4)
http://www.securityfocus.com/bid/108171 · [email protected]https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-frpwr-smb-snort · [email protected]http://www.securityfocus.com/bid/108171 · af854a3a-2127-422b-91ae-364da2661108https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-frpwr-smb-snort · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 03 MAY 15:10Z
    Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities
    cvelistv5