What is CVE-2019-12674?

CVE-2019-12674 is a high-severity vulnerability in Cisco Firepower Threat Defense Software, classified under CWE-216. CVSS score: 8.2/10. Published 2019-10-02.

How severe is CVE-2019-12674?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in Cisco Firepower Threat Defense Software

CVE-2019-12674

Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges i…

EPSS: 0.004 (34.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Cisco Firepower Threat Defense Software — versions unspecified
Cisco Firepower_4110
Cisco Firepower_4110_firmware
Cisco Firepower_4115
Cisco Firepower_4115_firmware
Cisco Firepower_4120
Cisco Firepower_4120_firmware
Cisco Firepower_4125
Cisco Firepower_4125_firmware
Cisco Firepower_4140

Weakness classification (CWE)

CWE-216
CWE-116 — Improper Encoding or Escaping of Output

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-12674?: CVE-2019-12674 is a high-severity vulnerability in Cisco Firepower Threat Defense Software, classified under CWE-216. CVSS score: 8.2/10. Published 2019-10-02.
How severe is CVE-2019-12674?: High severity. CVSS v3 base score is 8.2 out of 10.