VYPR
← All advisories
Medium severity5.8NVD Advisory· Published May 16, 2019· Updated Jun 17, 2026

CVE-2019-1833

CVE-2019-1833

Description

A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol parser of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies. The vulnerability is due to improper parsing of specific attributes in a TLS packet header. An attacker could exploit this vulnerability by sending malicious TLS messages to the affected system. A successful exploit could allow the attacker to bypass the configured policies for the system, which could allow traffic to flow through without being inspected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Cisco Systems, Inc./Secure Firewall Management Center5 versions
    cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:cisco:secure_firewall_management_center:6.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_management_center:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_management_center:6.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_management_center:6.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Firepower Threat Defense Softwarellm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.