CVE-2019-12701Improper Input Validation in Cisco Firepower Management Center

Severity
5.8MEDIUMNVD
EPSS
0.1%
top 74.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 2
Latest updateMay 24

Description

A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass the file and malware inspection policies on an affected system. The vulnerability exists because the affected software insufficiently validates incoming traffic. An attacker could exploit this vulnerability by sending a crafted HTTP request through an affected device. A successful exploit could allow the attacker to bypass the fi

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-45g8-5xrw-r5wm: A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote2022-05-24
CVEList
Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability2019-10-02

📋Vendor Advisories

1
Cisco
Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability2019-10-02
CVE-2019-12701 — Improper Input Validation in Cisco | cvebase