Lucene search

CiscoCVE-2019-12700

HistoryOct 02, 2019 - 7:15 p.m.

CVE-2019-12700

2019-10-0219:15:13

CWE-400

cisco

web.nvd.nist.gov

cisco

firepower

threat defense

ftd

management center

fmc

fxos

pam

dos

ssh

nvd

cve-2019-12700

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

45.1%

JSON

A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower Management Center (FMC) Software, and Cisco FXOS Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper resource management in the context of user session management. An attacker could exploit this vulnerability by connecting to an affected system and performing many simultaneous successful Secure Shell (SSH) logins. A successful exploit could allow the attacker to exhaust system resources and cause the device to reload, resulting in a DoS condition. To exploit this vulnerability, the attacker needs valid user credentials on the system.

Affected configurations

Nvd

Node

ciscofirepower_9300_firmwareMatchr114

ciscofirepower_9300_firmwareMatchr241

AND

ciscofirepower_9300Match-

Node

ciscofirepower_extensible_operating_systemRange≤2.2

ciscofirepower_extensible_operating_systemRange2.3–2.3.1.155

ciscofirepower_extensible_operating_systemRange2.4–2.6.1.131

Node

ciscofirepower_management_centerRange≤6.1.0

ciscofirepower_management_centerRange6.2.0–6.2.3.14

ciscofirepower_threat_defenseRange≤6.1.0

ciscofirepower_threat_defenseRange6.2.0–6.2.3.14

AND

ciscofirepower_1000Match-

ciscofirepower_2100Match-

Node

ciscofirepower_management_centerRange≤6.1.0

ciscofirepower_management_centerRange6.2.0–6.2.3.14

ciscofirepower_management_centerRange6.2.3–6.2.3.7

ciscofirepower_threat_defenseRange≤6.1.0

ciscofirepower_threat_defenseRange6.2.0–6.2.2.5

ciscofirepower_threat_defenseRange6.2.3–6.2.3.7

VendorProductVersionCPE
ciscofirepower_9300_firmwarer114cpe:2.3:o:cisco:firepower_9300_firmware:r114:*:*:*:*:*:*:*
ciscofirepower_9300_firmwarer241cpe:2.3:o:cisco:firepower_9300_firmware:r241:*:*:*:*:*:*:*
ciscofirepower_9300-cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*
ciscofirepower_extensible_operating_system*cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*
ciscofirepower_management_center*cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*
ciscofirepower_threat_defense*cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
ciscofirepower_1000-cpe:2.3:h:cisco:firepower_1000:-:*:*:*:*:*:*:*
ciscofirepower_2100-cpe:2.3:h:cisco:firepower_2100:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	firepower_9300_firmware	r114	cpe:2.3:o:cisco:firepower_9300_firmware:r114:::::::*
cisco	firepower_9300_firmware	r241	cpe:2.3:o:cisco:firepower_9300_firmware:r241:::::::*
cisco	firepower_9300	-	cpe:2.3:h:cisco:firepower_9300:-:::::::*
cisco	firepower_extensible_operating_system	*	cpe:2.3:o:cisco:firepower_extensible_operating_system::::::::
cisco	firepower_management_center	*	cpe:2.3:a:cisco:firepower_management_center::::::::
cisco	firepower_threat_defense	*	cpe:2.3:a:cisco:firepower_threat_defense::::::::
cisco	firepower_1000	-	cpe:2.3:h:cisco:firepower_1000:-:::::::*
cisco	firepower_2100	-	cpe:2.3:h:cisco:firepower_2100:-:::::::*

CNA Affected

[
  {
    "product": "Cisco Firepower Management Center",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-fpmc-dos

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

45.1%

JSON

Related for CVE-2019-12700