—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1
Below is the list of Cisco Security Advisories published by Cisco PSIRT on 2019-October-02.
The following PSIRT security advisories (13 High) were published at 16:00 UTC today.
Table of Contents:
1) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability – SIR: High
2) Cisco Firepower Management Center Command Injection Vulnerability – SIR: High
3) Cisco Firepower Management Center Remote Code Execution Vulnerability – SIR: High
4) Cisco Firepower Management Center Remote Code Execution Vulnerability – SIR: High
5) Cisco Firepower Management Center SQL Injection Vulnerabilities – SIR: High
6) Cisco FXOS Software and Firepower Threat Defense Software Command Injection Vulnerabilities – SIR: High
7) Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service Vulnerability – SIR: High
8) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF LSA Processing Denial of Service Vulnerability – SIR: High
9) Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability – SIR: High
10) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Inspection Denial of Service Vulnerability – SIR: High
11) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability – SIR: High
12) Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities – SIR: High
13) Multiple Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability – SIR: High
+——————————————————————–
1) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability
CVE-2019-15256
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ftd-ikev1-dos [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ftd-ikev1-dos”]
+——————————————————————–
2) Cisco Firepower Management Center Command Injection Vulnerability
CVE-2019-12690
SIR: High
CVSS Score v(3.0): 7.2
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-com-inj [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-com-inj”]
+——————————————————————–
3) Cisco Firepower Management Center Remote Code Execution Vulnerability
CVE-2019-12689
SIR: High
CVSS Score v(3.0): 7.5
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-rce-12689 [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-rce-12689”]
+——————————————————————–
4) Cisco Firepower Management Center Remote Code Execution Vulnerability
CVE-2019-12687, CVE-2019-12688
SIR: High
CVSS Score v(3.0): 8.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-rce [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-rce”]
+——————————————————————–
5) Cisco Firepower Management Center SQL Injection Vulnerabilities
CVE-2019-12679, CVE-2019-12680, CVE-2019-12681, CVE-2019-12682, CVE-2019-12683, CVE-2019-12684, CVE-2019-12685, CVE-2019-12686
SIR: High
CVSS Score v(3.0): 8.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-sql-inj [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-sql-inj”]
+——————————————————————–
6) Cisco FXOS Software and Firepower Threat Defense Software Command Injection Vulnerabilities
CVE-2019-12699
SIR: High
CVSS Score v(3.0): 8.8
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fxos-cmd-inject [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fxos-cmd-inject”]
+——————————————————————–
7) Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service Vulnerability
CVE-2019-12700
SIR: High
CVSS Score v(3.0): 7.7
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-fpmc-dos [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-fpmc-dos”]
+——————————————————————–
8) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF LSA Processing Denial of Service Vulnerability
CVE-2019-12676
SIR: High
CVSS Score v(3.0): 7.4
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ospf-lsa-dos [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ospf-lsa-dos”]
+——————————————————————–
9) Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability
CVE-2019-12677
SIR: High
CVSS Score v(3.0): 7.7
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ssl-vpn-dos [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ssl-vpn-dos”]
+——————————————————————–
10) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Inspection Denial of Service Vulnerability
CVE-2019-12678
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ftd-sip-dos [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-ftd-sip-dos”]
+——————————————————————–
11) Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability
CVE-2019-12673
SIR: High
CVSS Score v(3.0): 8.6
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-dos [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-asa-dos”]
+——————————————————————–
12) Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities
CVE-2019-12674, CVE-2019-12675
SIR: High
CVSS Score v(3.0): 8.2
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-container-esc [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-container-esc”]
+——————————————————————–
13) Multiple Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability
CVE-2019-1915
SIR: High
CVSS Score v(3.0): 6.5
URL: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-cucm-csrf [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-cucm-csrf”]
—–BEGIN PGP SIGNATURE—–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=armZ
—–END PGP SIGNATURE—–
_______________________________________________
cust-security-announce mailing list
cust-security-announce@cisco.com
To unsubscribe, send the command “unsubscribe” in the subject of your message to cust-security-announce-leave@cisco.com
