A vulnerability classified as critical was found in Cisco Firepower System Software (Firewall Software) (affected version not known). This vulnerability affects some unknown functionality of the component Detection Engine. The manipulation as part of a RAR File leads to a input validation vulnerability. The CWE definition for the vulnerability is CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see the Details section of this advisory.

The weakness was presented 10/02/2019 as cisco-sa-20191002-firepwr-bypa as confirmed advisory (Website). The advisory is available at tools.cisco.com. This vulnerability was named CVE-2019-12697 since 06/04/2019. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. The technical details are unknown and an exploit is not available.

Upgrading eliminates this vulnerability.

See VDB-142857 for similar entry.

Productinfo

Type

• Firewall Software

Vendor

• Cisco

Name

• Firepower System Software

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion