Skip to content
Fencer Vulns
medium 5.8

CVE-2019-1978 json

Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability

published 2019-11-05 7 y ago modified 2026-08-11 2 mo ago also EUVD-2019-10535

cvss
5.8
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
9.4%
EPSS 9.4% chance of exploitation in 30 days, percentile 95%
public exploits
1
Exploit-DB

Summary

A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper reassembly of traffic streams. An attacker could exploit this vulnerability by sending crafted streams through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems that would otherwise be blocked.

Timeline

  1. Published
  2. First public exploit (EDB-47902)

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
23 mo ago

Exploit prediction

9.38% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-47902 Citrix Application Delivery Controller and Citrix Gateway - Remote Code Execution webapps, 2020-01-11

CVSS scores

assigned by version score vector
CNA 3.0 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
NVD 3.1 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

  • Cisco Cisco Firepower Threat Defense Software

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
  • CWE-20 Improper Input Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.