CVE-2019-12697
Summary
| CVE | CVE-2019-12697 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-10-02 19:15:00 UTC |
| Updated | 2020-10-08 14:02:00 UTC |
| Description | Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see the Details section of this advisory. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | Asa 5500-x | - | All | All | All |
| Hardware | Cisco | Asa 5500-x | - | All | All | All |
| Application | Cisco | Firepower | 6.2.3.1 | All | All | All |
| Application | Cisco | Firepower | 6.2.3.7 | All | All | All |
| Application | Cisco | Firepower | 6.3.0 | All | All | All |
| Application | Cisco | Firepower | 6.4.0 | All | All | All |
| Application | Cisco | Firepower | 6.2.3.1 | All | All | All |
| Application | Cisco | Firepower | 6.2.3.7 | All | All | All |
| Application | Cisco | Firepower | 6.3.0 | All | All | All |
| Application | Cisco | Firepower | 6.4.0 | All | All | All |
| Hardware | Cisco | Firepower 1010 | - | All | All | All |
| Hardware | Cisco | Firepower 1010 | - | All | All | All |
| Hardware | Cisco | Firepower 1120 | - | All | All | All |
| Hardware | Cisco | Firepower 1120 | - | All | All | All |
| Hardware | Cisco | Firepower 1140 | - | All | All | All |
| Hardware | Cisco | Firepower 1140 | - | All | All | All |
| Hardware | Cisco | Firepower 2110 | - | All | All | All |
| Hardware | Cisco | Firepower 2110 | - | All | All | All |
| Hardware | Cisco | Firepower 2120 | - | All | All | All |
| Hardware | Cisco | Firepower 2120 | - | All | All | All |
| Hardware | Cisco | Firepower 2130 | - | All | All | All |
| Hardware | Cisco | Firepower 2130 | - | All | All | All |
| Hardware | Cisco | Firepower 2140 | - | All | All | All |
| Hardware | Cisco | Firepower 2140 | - | All | All | All |
| Hardware | Cisco | Firepower 4110 | - | All | All | All |
| Hardware | Cisco | Firepower 4110 | - | All | All | All |
| Hardware | Cisco | Firepower 4115 | - | All | All | All |
| Hardware | Cisco | Firepower 4115 | - | All | All | All |
| Hardware | Cisco | Firepower 4120 | - | All | All | All |
| Hardware | Cisco | Firepower 4120 | - | All | All | All |
| Hardware | Cisco | Firepower 4125 | - | All | All | All |
| Hardware | Cisco | Firepower 4125 | - | All | All | All |
| Hardware | Cisco | Firepower 4140 | - | All | All | All |
| Hardware | Cisco | Firepower 4140 | - | All | All | All |
| Hardware | Cisco | Firepower 4145 | - | All | All | All |
| Hardware | Cisco | Firepower 4145 | - | All | All | All |
| Hardware | Cisco | Firepower 4150 | - | All | All | All |
| Hardware | Cisco | Firepower 4150 | - | All | All | All |
| Hardware | Cisco | Firepower 7000 | - | All | All | All |
| Hardware | Cisco | Firepower 7000 | - | All | All | All |
| Hardware | Cisco | Firepower 8000 | - | All | All | All |
| Hardware | Cisco | Firepower 8000 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 | - | All | All | All |
| Hardware | Cisco | Firepower Threat Defense For Isr | - | All | All | All |
| Hardware | Cisco | Firepower Threat Defense For Isr | - | All | All | All |
| Hardware | Cisco | Ftd Virtual | - | All | All | All |
| Hardware | Cisco | Ftd Virtual | - | All | All | All |
| Hardware | Cisco | Isa 3000 | - | All | All | All |
| Hardware | Cisco | Isa 3000 | - | All | All | All |
| Hardware | Cisco | Ngipsv For Vmware | - | All | All | All |
| Hardware | Cisco | Ngipsv For Vmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.