CVE-2019-1978: falha de média gravidade em Cisco Firepower Threat Defense Software
Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 5.8epss 9.4%
da publicação à arma67 dias
Publicada no NVD5 de nov.
1ª PoC+67d
A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper reassembly of traffic streams. An attacker could exploit this vulnerability by sending crafted streams through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems that would otherwise be blocked.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Produtos afetados
Cisco · Cisco Firepower Threat Defense SoftwarePoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/47902não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Cisco Firepower Threat Defense Software
No mesmo produto, das mais perigosas para as menos.
CVE-2024-20353HIGHCVE-2024-20353EPSS 69.8%KEVCVE-2023-20269MEDIUMCVE-2023-20269EPSS 26.6%KEVCVE-2024-20359MEDIUMCVE-2024-20359EPSS 18.8%KEVCVE-2024-20481MEDIUMCVE-2024-20481EPSS 15.9%KEVCVE-2025-20363CRITICALCVE-2025-20363EPSS 7.2%CVE-2019-1703HIGHCisco Firepower Threat Defense Software Packet Processing Denial of Service VulnerabilityEPSS 2.9%