CVE-2019-12697
Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities
- State
- Published
- Severity
- 5.8 Medium
- Published
- Oct 2, 2019
- Updated
- Nov 19, 2024
- Reserved
- Jun 4, 2019
Description
Multiple vulnerabilities in the Cisco Firepower System Software Detection Engine could allow an unauthenticated, remote attacker to bypass configured Malware and File Policies for RTF and RAR file types. For more information about these vulnerabilities, see the Details section of this advisory.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.8 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco FireSIGHT System SoftwareCisco |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.