CVE-2019-15992

cisco adaptive security appliance, cisco adaptive security appliance software, cisco secure firewall management center +1 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2019-15992

Katalog CVE

CVSS 7.2 · High EPSS 4,1%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada cisco adaptive security appliance, cisco adaptive security appliance software +2 lainnya. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in the implementation of the Lua interpreter integrated in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying Linux operating system of an affected device. The vulnerability is due to insufficient restrictions on the allowed Lua function calls within the context of user-supplied Lua scripts. A successful exploit could allow the attacker to trigger a heap overflow condition and execute arbitrary code with root privileges on the underlying Linux operating system of an affected device.

Rincian

Terbit di NVD
23 September 2020
Terakhir diubah
11 Agustus 2026
Status NVD
Modified
CVSS 3.1
7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787: Out-of-bounds Write
EPSS (30 hari)
4,1% peluang dieksploitasi; lebih tinggi dari 90,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco adaptive security appliance Semua versi sebelum 9.6.4.36
cisco adaptive security appliance software Versi 9.7 hingga sebelum 9.8.4.15
cisco adaptive security appliance software Versi 9.9 hingga sebelum 9.9.2.61
cisco adaptive security appliance software Versi 9.10 hingga sebelum 9.10.1.32
cisco adaptive security appliance software Versi 9.12 hingga sebelum 9.12.3
cisco adaptive security appliance software Versi 9.13 hingga sebelum 9.13.1.4
cisco adaptive security appliance software Versi 9.14 hingga sebelum 9.14.2.7
cisco adaptive security appliance software Versi 9.15 hingga sebelum 9.15.1.4
cisco secure firewall management center Semua versi sebelum 6.2.3.16
cisco secure firewall management center Versi 6.3.0 hingga sebelum 6.3.0.6
cisco secure firewall management center Versi 6.4.0 hingga sebelum 6.4.0.7
cisco secure firewall management center Versi 6.5.0 hingga sebelum 6.5.0.2
cisco secure firewall threat defense Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.