Summary

• The October 2, 2019, release of the Cisco ASA, FMC, and FTD Software Security Advisory Collection includes 10 Cisco Security Advisories that describe 18 vulnerabilities in Cisco ASA Software, Cisco FMC Software, and Cisco FTD Software. Cisco has released software updates that address these vulnerabilities.

  All of the vulnerabilities have a Security Impact Rating (SIR) of High. Successful exploitation of the vulnerabilities could allow an attacker to gain unauthorized access, gain elevated privileges, execute arbitrary commands, or cause a denial of service (DoS) condition on an affected device.

  Four of the vulnerabilities affect both Cisco ASA Software and Cisco FTD Software, 12 of the vulnerabilities affect Cisco FMC Software, one of the vulnerabilities affects Cisco ASA Software, and one of the vulnerabilities affects Cisco FTD Software.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  cisco-sa-20191002-asa-dos Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability	CVE-2019-12673	High	8.6
  cisco-sa-20191002-asa-ftd-ikev1-dos Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability	CVE-2019-15256	High	8.6
  cisco-sa-20191002-asa-ospf-lsa-dos Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF LSA Processing Denial of Service Vulnerability	CVE-2019-12676	High	7.4
  cisco-sa-20191002-asa-ftd-sip-dos Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Inspection Denial of Service Vulnerability	CVE-2019-12678	High	8.6
  cisco-sa-20191002-asa-ssl-vpn-dos Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability	CVE-2019-12677	High	7.7
  cisco-sa-20191002-fmc-com-inj Cisco Firepower Management Center Command Injection Vulnerability	CVE-2019-12690	High	7.2
  cisco-sa-20191002-fmc-rce Cisco Firepower Management Center Remote Code Execution Vulnerability	CVE-2019-12687, CVE-2019-12688	High	8.8
  cisco-sa-20191002-fmc-rce-12689 Cisco Firepower Management Center Remote Code Execution Vulnerability	CVE-2019-12689	High	7.5
  cisco-sa-20191002-fmc-sql-inj Cisco Firepower Management Center SQL Injection Vulnerabilities	CVE-2019-12679, CVE-2019-12680, CVE-2019-12681, CVE-2019-12682, CVE-2019-12683, CVE-2019-12684, CVE-2019-12685, CVE-2019-12686	High	8.8
  cisco-sa-20191002-ftd-container-esc Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities	CVE-2019-12675, CVE-2019-12674	High	8.2

  
  

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A