漏洞信息详情
Cisco Firepower System 输入验证错误漏洞
漏洞简介
Cisco Firepower System中的检测引擎存在安全漏洞,该漏洞源于对RTF文件内容的错误检测。远程攻击者可通过发送恶意的RTF文件利用该漏洞绕过对RTF文件类型所配置的恶意软件和文件策略。以下产品及版本受到影响:3000 Series Industrial Security Appliances (ISAs);Adaptive Security Appliance (ASA) 5500-X Series Firewalls;ASA 5500-X Series with FirePOWER Services;Advanced Malware Protection (AMP) for Networks for FirePOWER 7000 Series Appliances;AMP for Networks for FirePOWER 8000 Series Appliances;Firepower 2100 Series;Firepower 4100 Series;Firepower 1000 Series Appliances;FirePOWER 7000 Series Appliances;FirePOWER 8000 Series Appliances;Firepower 9300 Security Appliances;Firepower Threat Defense for Integrated Services Routers (ISRs);FTD Virtual (FTDv);Next-Generation Intrusion Prevention System (NGIPS)。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-firepwr-bypass
参考网址
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-12696
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.3729/
来源:tools.cisco.com
链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-firepwr-bypass
受影响实体
暂无
补丁
- Cisco Firepower System 安全漏洞的修复措施<!--2019-10-2-->
还没有评论,来说两句吧...