Multiple Cisco Products CVE-2019-1693 Denial of Service Vulnerability

Bugtraq ID:	108157
Class:	Design Error
CVE:	CVE-2019-1693
Remote:	Yes
Local:	No
Published:	May 01 2019 12:00AM
Updated:	May 01 2019 12:00AM
Credit:	Qian Chen of Qihoo 360 Information Security Department.
Vulnerable:	Cisco Firepower Threat Defense Virtual (FTDv) 0 Cisco Firepower Threat Defense Software 6.4 Cisco Firepower Threat Defense Software 6.3 Cisco Firepower Threat Defense Software 6.2.3 Cisco Firepower Threat Defense Software 6.2.2 Cisco Firepower Threat Defense Software 6.2 Cisco Firepower Threat Defense Software 6.1 Cisco Firepower Threat Defense Software 6.2.1 Cisco Firepower Threat Defense Software 6.0.1 Cisco Firepower Threat Defense Software 6.0 Cisco Firepower 9300 Security Appliance 0 Cisco Firepower 4100 Series 0 Cisco Firepower 2100 Series 0 Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches 0 Cisco ASA Services Module for Cisco 7600 Series Routers 0 Cisco ASA 5500-X Series Firewalls 0 Cisco Asa 1000V Cloud Firewall 0 Cisco Adaptive Security Virtual Appliance (ASAv) 0 Cisco Adaptive Security Appliance (ASA) Software 9.9 Cisco Adaptive Security Appliance (ASA) Software 9.8 Cisco Adaptive Security Appliance (ASA) Software 9.7 Cisco Adaptive Security Appliance (ASA) Software 9.6 Cisco Adaptive Security Appliance (ASA) Software 9.5 Cisco Adaptive Security Appliance (ASA) Software 9.4 Cisco Adaptive Security Appliance (ASA) Software 9.12 Cisco Adaptive Security Appliance (ASA) Software 9.10 Cisco 3000 Series Industrial Security Appliance (ISA) 0
Not Vulnerable:	Cisco Firepower Threat Defense Software 6.3.0.3 Cisco Firepower Threat Defense Software 6.2.3.12 Cisco Adaptive Security Appliance (ASA) Software 9.8.4 Cisco Adaptive Security Appliance (ASA) Software 9.9.2.50 Cisco Adaptive Security Appliance (ASA) Software 9.6.4.25 Cisco Adaptive Security Appliance (ASA) Software 9.4.4.34 Cisco Adaptive Security Appliance (ASA) Software 9.10.1.17

Multiple Cisco Products CVE-2019-1693 Denial of Service Vulnerability

Cisco Adaptive Security Appliance and Firepower Threat Defense Software are prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause a reload of the affected devices, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCvn77957.

Multiple Cisco Products CVE-2019-1693 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Cisco Products CVE-2019-1693 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Cisco Products CVE-2019-1693 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software (Cisco)