Back to feed
EUVD-2019-10389 · Published May 16, 2019
A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by sending crafted ICMP packets to the affected device. A successful exploit could allow the attacker to bypass configured access control policies.
Technologies
Cisco Secure Firewall Management Center
Weaknesses
CWE-693
CVSS scores
- v3.07.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - v2.05.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Execution Privilege Escalation Stealth Credential Access Discovery Impact
References
Potentially impacted assets
See if this affects your attack surface
