Resource exhaustion in Cisco Firepower 9300 Security Appliance and Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - CVE-2019-12700
Published: October 8, 2019
Vulnerability identifier: #VU21629
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-12700
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper resource management in the context of user session management. A remote authenticated attacker can connect to an affected system, perform many simultaneous successful Secure Shell (SSH) logins, trigger resource exhaustion and perform a denial of service (DoS) attack.
Affected software
Cisco Firepower 9300 Security Appliance
Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC)
Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC)
How to mitigate CVE-2019-12700
Install updates from vendor's website.
Cisco Firepower 9300 Security Appliance - addressed in versions 2.2.2.120, 2.2.2.121, 2.3.1.146, 2.3.1.152, 2.4.1.249, 2.6.1.102, 6.2.3.14, 9.8.4.7, 9.9.2.52, 9.9.2.56, 82.7.1.1077, 82.7.100.279
Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - addressed in versions 6.2.2.5, 6.2.3.7
Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC) - addressed in versions 6.2.2.5, 6.2.3.7