Vulnerability Description
Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Firepower | 6.2.3.1 |
| Cisco | Asa 5500-X | - |
| Cisco | Firepower 1010 | - |
| Cisco | Firepower 1120 | - |
| Cisco | Firepower 1140 | - |
| Cisco | Firepower 2110 | - |
| Cisco | Firepower 2120 | - |
| Cisco | Firepower 2130 | - |
| Cisco | Firepower 2140 | - |
| Cisco | Firepower 4110 | - |
| Cisco | Firepower 4115 | - |
| Cisco | Firepower 4120 | - |
| Cisco | Firepower 4125 | - |
| Cisco | Firepower 4140 | - |
| Cisco | Firepower 4145 | - |
| Cisco | Firepower 4150 | - |
| Cisco | Firepower 7000 | - |
| Cisco | Firepower 8000 | - |
| Cisco | Firepower 9300 | - |
| Cisco | Firepower Threat Defense For Isr | - |
Related Weaknesses (CWE)
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Vendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Vendor Advisory
FAQ
What is CVE-2019-12697?
CVE-2019-12697 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file typ...
How severe is CVE-2019-12697?
CVE-2019-12697 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-12697?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Firepower, Cisco Asa 5500-X, Cisco Firepower 1010, Cisco Firepower 1120, Cisco Firepower 1140.