Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-12627

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data.

Published

2019-08-21T19:15:13.293

Last Modified

2024-11-21T04:23:13.203

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-284
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco firepower_threat_defense < 6.4.0.4 Yes
Hardware cisco amp_7150 - No
Hardware cisco amp_8150 - No
Hardware cisco firepower_7010 - No
Hardware cisco firepower_7020 - No
Hardware cisco firepower_7030 - No
Hardware cisco firepower_7050 - No
Hardware cisco firepower_7110 - No
Hardware cisco firepower_7115 - No
Hardware cisco firepower_7120 - No
Hardware cisco firepower_7125 - No
Hardware cisco firepower_8120 - No
Hardware cisco firepower_8130 - No
Hardware cisco firepower_8140 - No
Hardware cisco firepower_8250 - No
Hardware cisco firepower_8260 - No
Hardware cisco firepower_8270 - No
Hardware cisco firepower_8290 - No
Hardware cisco firepower_8350 - No
Hardware cisco firepower_8360 - No
Hardware cisco firepower_8370 - No
Hardware cisco firepower_8390 - No
Hardware cisco firepower_management_center_1000 - No
Hardware cisco firepower_management_center_2000 - No
Hardware cisco firepower_management_center_2500 - No
Hardware cisco firepower_management_center_4000 - No
Hardware cisco firesight_management_center_1500 - No
Hardware cisco firesight_management_center_3500 - No
Hardware cisco firesight_management_center_750 - No
References