What is CVE-2019-1980?

CVE-2019-1980 is a medium-severity vulnerability in Cisco Firepower Threat Defense Software, classified under CWE-264. CVSS score: 5.3/10. Published 2019-11-05.

How severe is CVE-2019-1980?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Cisco Firepower Threat Defense Software

CVE-2019-1980

A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to by…

EPSS: 0.010 (58.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Cisco Firepower Threat Defense Software — versions unspecified
Cisco Firepower_services_software_for_asa
Cisco Firepower_threat_defense
Cisco Secure_firewall_management_center — versions 2.9.15, 2.9.16

Weakness classification (CWE)

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-1980?: CVE-2019-1980 is a medium-severity vulnerability in Cisco Firepower Threat Defense Software, classified under CWE-264. CVSS score: 5.3/10. Published 2019-11-05.
How severe is CVE-2019-1980?: Medium severity. CVSS v3 base score is 5.3 out of 10.