CVE-2019-1704
HighCVSS 7.5Exploitation Probability (EPSS)
High risk81th percentile - higher than 81% of all known CVEs
Summary
Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco FTD Software could allow an unauthenticated, adjacent or remote attacker to cause a DoS condition. For more information, see the Details section of the Cisco advisory.
Risk Assessment
The risk is the potential for DoS attacks on FTD devices, which may disrupt network traffic processing.
Recommendation
Review the Cisco advisory and apply the appropriate patches.
Other vulnerabilities in Cisco Firepower Threat Defense (FTD)
See all- CVE-2019-1703High
A vulnerability in the internal packet-processing functionality of Cisco FTD Software for Firepower 2100 Series could allow an unauthenticated, remote attacker to cause the device to stop processing traffic, resulting in a DoS condition. The issue is due to a logic error that may prevent ingress buffers from being replenished under specific traffic conditions. An attacker could exploit this by sending a series of crafted packets, potentially exhausting all input buffers and causing a queue wedge in all active interfaces.
- CVE-2018-15462High
A vulnerability in the TCP ingress handler for data interfaces configured with management access in Cisco FTD Software could allow an unauthenticated, remote attacker to cause an increase in CPU and memory usage, resulting in a DoS condition. The issue is due to insufficient ingress TCP rate limiting for TCP ports 22 (SSH) and 443 (HTTPS). An attacker could exploit this by sending a crafted, steady stream of TCP traffic to port 22 or 443 on data interfaces with management access.
Original NVD description (English source)
Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.