[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2019-12696":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":24,"cwes":25,"cpes":28,"technologies":55,"references":79,"score":81,"epss_score":82,"epss_percentile":83,"is_kev":84,"cisa_kev_date_added":85,"cisa_kev_due_date":85,"cisa_ssvc":86,"attack_mappings":96,"exploits":153},244645,"CVE-2019-12696","EUVD-2019-4287","Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see the Details section of this advisory.","2019-10-02T19:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":15,"confidentialityImpact":15},"2.0",5,"NETWORK","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","NONE","PARTIAL","LOW",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":15,"attackComplexity":17,"availabilityImpact":15,"privilegesRequired":15,"confidentialityImpact":15},"UNCHANGED","3.1",7.5,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",true,[26,27],"CWE-693","NVD-CWE-Other",[29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54],"cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_2130:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_1010:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_2120:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_2140:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_8000:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_2110:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_7000:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:asa_5500-x:-:*:*:*:*:*:*:*","cpe:2.3:a:cisco:firepower:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:cisco:firepower:6.4.0:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:ftd_virtual:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_threat_defense_for_isr:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:isa_3000:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:ngipsv_for_vmware:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_1140:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_1120:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*","cpe:2.3:a:cisco:firepower:6.2.3.7:*:*:*:*:*:*:*","cpe:2.3:a:cisco:firepower:6.2.3.1:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*","cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*",[56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78],"Cisco Firepower 4120","Cisco Ftd Virtual","Cisco Firepower 4115","Cisco Firepower 4140","Cisco Firepower 2120","Cisco Firepower 1010","Cisco Firepower 2140","Cisco Asa 5500-X","Cisco Firepower 9300","Cisco Firepower 8000","Cisco Firepower 2110","Cisco Firepower 1140","Cisco Firepower 4110","Cisco Firepower 2130","Cisco Firepower 4145","Cisco Firepower 7000","Cisco Firepower 1120","Cisco Firepower Threat Defense For Isr","Cisco Ngipsv For Vmware","Cisco Firepower 4125","Cisco Firepower 4150","Cisco Firepower","Cisco Isa 3000",[80],"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20191002-firepwr-bypass",0.57,0.01455,0.73306,false,null,{"timestamp":87,"automatable":88,"tech_impact":89,"exploitation":90,"cisa_decision":91,"cisa_remediation_timeline":95},"2024-11-19T17:22:46.375774Z","yes","partial","none",{"vector":92,"decision":93,"priority":94},"CISAv1\u002FE:N\u002FA:Y\u002FT:P\u002FM:H\u002F2026-10-25T11:14:30.594945\u002F","attend","medium","14D",[97,103,114,121,129,138,145],{"name":98,"source":99,"tactics":100,"technique_id":102},"Exploit Public-Facing Application","attack_vector",[101],"initial-access","T1190",{"name":104,"source":105,"cwe_ids":106,"tactics":107,"capec_ids":110,"technique_id":113},"Network Sniffing","capec",[26],[108,109],"credential-access","discovery",[111,112],"CAPEC-57","CAPEC-65","T1040",{"name":115,"source":105,"cwe_ids":116,"tactics":117,"capec_ids":118,"technique_id":120},"File and Directory Discovery",[26],[109],[119],"CAPEC-127","T1083",{"name":122,"source":105,"cwe_ids":123,"tactics":124,"capec_ids":126,"technique_id":128},"Transmitted Data Manipulation",[26],[125],"impact",[127],"CAPEC-668","T1565.002",{"name":130,"source":105,"cwe_ids":131,"tactics":132,"capec_ids":135,"technique_id":137},"Executable Installer File Permissions Weakness",[26],[133,134],"execution","stealth",[136],"CAPEC-17","T1574.005",{"name":139,"source":105,"cwe_ids":140,"tactics":141,"capec_ids":142,"technique_id":144},"Services File Permissions Weakness",[26],[133,134],[143,136],"CAPEC-1","T1574.010",{"name":146,"source":105,"cwe_ids":147,"tactics":148,"capec_ids":150,"technique_id":152},"Escape to Host",[26],[149],"privilege-escalation",[151],"CAPEC-480","T1611",[]]