Vulnerability in Cisco Asa 5500-X
CVE-2019-12697
Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see the Details section of this advisory.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.015 (72.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 72nd percentile — 72.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.015 · newest: 0.015 · change: 0.000
Affected products
- Cisco Asa 5500-X
- Cisco Firesight System Software — versions unspecified
- Cisco Firepower — versions 6.2.3.1, 6.2.3.7, 6.3.0
- Cisco Firepower 1010
- Cisco Firepower 1120
- Cisco Firepower 1140
- Cisco Firepower 2110
- Cisco Firepower 2120
- Cisco Firepower 2130
- Cisco Firepower 2140
Weakness classification (CWE)
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002… (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-12697?
- CVE-2019-12697 is a high-severity vulnerability in Cisco Asa 5500-X, classified under Protection Mechanism Failure. CVSS score: 7.5/10. Published 2019-10-02.
- How severe is CVE-2019-12697?
- High severity. CVSS v3 base score is 7.5 out of 10.