Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.6

Cisco Firepower Threat Defense may let attackers bypass controls

CVE-2019-1669 · published 7 years ago
Summary

The data acquisition part of Cisco Firepower Threat Defense can be tricked by specially crafted network traffic, allowing an outsider to ignore your firewall rules or crash the system. This happens because the software mismanages its memory when examining traffic. Apply the vendor's update and restart the device to restore normal protection.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco secure_firewall_threat_defense 6.3.0
6.4.0
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.3.0:*:*:*:*:*:*:*
Original advisory text
A vulnerability in the data acquisition (DAQ) component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies...
A vulnerability in the data acquisition (DAQ) component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service (DoS) condition. The vulnerability exists because the affected software improperly manages system memory resources when inspecting traffic. An attacker could exploit this vulnerability by generating specific traffic patterns for the software to inspect. A successful exploit could allow the attacker to exhaust system memory resources used for traffic inspection. Depending on the configuration, the FTD Software could fail open and cease to inspect traffic or fail closed and result in a DoS condition. This vulnerability may require manual intervention to restore the software.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.6 High
Exploitation
1% chance of attack within 30 days
Type
CWE-693Protection Mechanism Failure
Timeline
Published24 Jan 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-1669 · NVD
Track software like this
Free during beta