What’s Vulnerable › Vulnerabilities

CVE-2019-12701: Cisco Firepower Management Center Software File and Malware Policy Bypass Vulnerability

• Severity: medium (CVSS 5.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-02 · updated 2026-06-17
• Weakness: CWE-20

Description

A vulnerability in the file and malware inspection feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass the file and malware inspection policies on an affected system. The vulnerability exists because the affected software insufficiently validates incoming traffic. An attacker could exploit this vulnerability by sending a crafted HTTP request through an affected device. A successful exploit could allow the attacker to bypass the file and malware inspection policies and send malicious traffic through the affected device.

Affected products

• Cisco Firepower Management Center: all versions
• Cisco Vdb Fingerprint Database: before 327 — fixed in 327

How to fix

Upgrade to a fixed version: Cisco Vdb Fingerprint Database 327. Check the vendor advisory for mitigations.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fire-bypass
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fire-bypass

Get alerted when CVE-2019-12701 or the next vulnerability affects your stack