ReviewHigh

CVE-2019-1709

Cisco Cisco Firepower Threat Defense Software, secure firewall management center, secure firewall threat defense

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting commands into arguments for a specific command. A successful exploit could allow the attacker to execute commands with root privileges.

CVSS: 7.8
EPSS: 0.68%
CISA KEV: Not listed
Published: 2019.05.04

PRIORITY ASSESSMENT

Review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.68%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Cisco Cisco Firepower Threat Defense Software, secure firewall management center, secure firewall threat defense
Affected versions: >= unspecified < 6.2.3.12, 6.3.0, 6.0.0, 6.0.1, 6.1.0, 6.2.0, 6.2.1, 6.2.2, 6.2.3
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Cisco Cisco Firepower Threat Defense Software, secure firewall management center, secure firewall threat defense and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-78