CVE-2019-1694
published 2019-05-03CVE-2019-1694: A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…
PriorityP349high8.6CVSS 3.1
AVNACLPRNUINSCCNINAH
EPSS
2.52%
83.0th percentile
A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper handling of TCP traffic. An attacker could exploit this vulnerability by sending a specific sequence of packets at a high rate through an affected device. A successful exploit could allow the attacker to temporarily disrupt traffic through the device while it reboots.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance_software | < 9.4.4.34 | 9.4.4.34 |
| cisco | adaptive_security_appliance_software | >= 9.10 < 9.10.1.17 | 9.10.1.17 |
| cisco | adaptive_security_appliance_software | >= 9.5 < 9.6.4.25 | 9.6.4.25 |
| cisco | adaptive_security_appliance_software | >= 9.7 < 9.8.4 | 9.8.4 |
| cisco | adaptive_security_appliance_software | >= 9.9 < 9.9.2.50 | 9.9.2.50 |
| cisco | cisco_adaptive_security_appliance_software | >= unspecified < 9.4.4.34 | 9.4.4.34 |
| cisco | cisco_adaptive_security_appliance_software | >= unspecified < 9.6.4.25 | 9.6.4.25 |
| cisco | cisco_adaptive_security_appliance_software | >= unspecified < 9.8.4 | 9.8.4 |
| cisco | cisco_adaptive_security_appliance_software | >= unspecified < 9.9.2.50 | 9.9.2.50 |
| cisco | cisco_adaptive_security_appliance_software | >= unspecified < 9.10.1.17 | 9.10.1.17 |
| cisco | cisco_firepower_threat_defense_software | >= unspecified < 6.2.3.12 | 6.2.3.12 |
| cisco | cisco_firepower_threat_defense_software | >= unspecified < 6.3.0.3 | 6.3.0.3 |
| cisco | firepower_threat_defense | < 6.2.3.12 | 6.2.3.12 |
| cisco | firepower_threat_defense | >= 6.3.0 < 6.3.0.3 | 6.3.0.3 |
CVSS provenance
nvdv3.18.6HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
nvdv3.08.6HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco8.6HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p7p7-4pch-phj8: A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software cou
ghsa_unreviewed·2022-05-24
CVE-2019-1694 [HIGH] CWE-20 GHSA-p7p7-4pch-phj8: A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software cou
A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper handling of TCP traffic. An attacker could exploit this vulnerability by sending a specific sequence of packets at a high rate through an affected device. A successful exploit could allow the attacker to temporarily disrupt traffic through the device while it reboots.
Cisco
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability
vendor_cisco·2019-05-01·CVSS 8.6
CVE-2019-1694 [HIGH] CWE-20 Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability
A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition.
The vulnerability is due to the improper handling of TCP traffic. An attacker who is using a TCP protocol that is configured for inspection could exploit this vulnerability by sending a specific sequence of packets at a high rate through an affected device. A successful exploit could allow the attacker to temporarily disrupt traffic through the device while it reboots.
Cisco
Cisco
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2019-1694 Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability
CVE-2019-1694: Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability
A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper handling of TCP traffic. An attacker who is using a TCP protocol that is configured for inspection could exploit this vulnerability by sending a specific sequence of packets at a high rate through an affected device. A successful exploit could allow the attacker to temporarily disrupt traffic through the device while it
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-05-03
Published