CVE-2019-1970
MediumCVSS 5.8Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
A vulnerability in the SSL/TLS protocol inspection engine of Cisco FTD Software could allow an unauthenticated, remote attacker to bypass configured file policies on an affected system. The issue is due to errors when handling specific SSL/TLS messages. An attacker could exploit this by sending crafted HTTP packets through the system, bypassing policies and delivering a malicious payload to the protected network.
Risk Assessment
The risk is that malicious software could be delivered into the protected network despite configured file policies, potentially leading to system compromise.
Recommendation
It is recommended to upgrade FTD software to a patched version and review file policy configurations.
Original NVD description (English source)
A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors when handling specific SSL/TLS messages. An attacker could exploit this vulnerability by sending crafted HTTP packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured file policies and deliver a malicious payload to the protected network.