CVE-2019-1708 (CNNVD-201905-039)
中文标题:
Cisco Adaptive Security Appliance Software和Firepower Threat Defense Software 安全漏洞
英文标题:
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service Vulnerability
漏洞描述
中文描述:
Cisco Nexus 5500 Series Switches等都是美国思科（Cisco）公司的产品。Cisco Nexus 5500 Series Switches是一款5500系列的交换机产品。Cisco Firepower 4100 Series是一款4100系列的防火墙设备。FTD Software是其中的一套提供下一代防火墙服务的统一软件。Cisco 3000 Series Industrial Security Appliances是一款3000系列防火墙设备。ASA Software是其中的一套防火墙和网络安全平台。该平台提供了对数据和网络资源的高度安全的访问等功能。 Cisco ASA Software和Cisco FTD Software中的Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE)功能存在安全漏洞，该漏洞源于程序没有正确处理MOBIKE数据包。远程攻击者可借助特制的MOBIKE数据包利用该漏洞造成内存泄露或重新加载设备，导致拒绝服务。以下产品受到影响：Cisco 3000 Series Industrial Security Appliances (ISAs)；ASA 5500 Series Adaptive Security Appliances；ASA 5500-X Series Firewalls；ASA Services Module for Cisco Catalyst 6500 Series Switches和Cisco 7600 Series Routers；Firepower 4100 Series；Firepower 9300 Security Appliance；FTD Virtual (FTDv)。
英文描述:
A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to the incorrect processing of certain MOBIKE packets. An attacker could exploit this vulnerability by sending crafted MOBIKE packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. The MOBIKE feature is supported only for IPv4 addresses.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | - | < 9.8.4 | - |
cpe:2.3:a:cisco:cisco_adaptive_security_appliance_(asa)_software:*:*:*:*:*:*:*:*
|
| Cisco | Cisco Firepower Threat Defense (FTD) Software | - | < 6.2.3.12 | - |
cpe:2.3:a:cisco:cisco_firepower_threat_defense_(ftd)_software:*:*:*:*:*:*:*:*
|
| cisco | firepower_threat_defense | * | - | - |
cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | * | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.0 (cna)
HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2019-1708 |
2025-11-11 15:20:08 | 2025-11-11 07:35:38 |
| NVD | nvd_CVE-2019-1708 |
2025-11-11 14:56:22 | 2025-11-11 07:44:09 |
| CNNVD | cnnvd_CNNVD-201905-039 |
2025-11-11 15:10:12 | 2025-11-11 07:54:29 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-201905-039
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 5 -> 4
- data_sources: ['cve'] -> ['cve', 'nvd']