CVE-2019-12675— Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities
Quick assessment
Affected
Cisco Cisco Firepower Threat Defense Software
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Firepower 4100 Series Security Appliances和Firepower 9300 Series Security Appliances中的Cisco Firepower Threat Defense (FTD) Software的多实例功能存在安全漏洞，该漏洞源于程序没有对底层文件系统进行充分的保护。本地攻击者可通过修改底层文件系统上的重要文件利用该漏洞在主机名称空间中以root权限执行命令。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-12675
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections on the underlying filesystem. An attacker could exploit these vulnerabilities by modifying critical files on the underlying filesystem. A successful exploit could allow the attacker to execute commands with root privileges within the host namespace. This could allow the attacker to impact other running FTD instances.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
容器错误
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Firepower Threat Defense 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Firepower 4100 Series Security Appliances和Firepower 9300 Series Security Appliances中的Cisco Firepower Threat Defense (FTD) Software的多实例功能存在安全漏洞，该漏洞源于程序没有对底层文件系统进行充分的保护。本地攻击者可通过修改底层文件系统上的重要文件利用该漏洞在主机名称空间中以root权限执行命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Firepower Threat Defense Software | unspecified ~ n/a | - |
|
II. Public POCs for CVE-2019-12675
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-12675
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-12675 (1)
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-container-esc vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2019-10-02 · 43 CVEs total
| CVE-2019-12683 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12691 | Cisco Firepower Management Center Directory Traversal Vulnerability | |
| CVE-2019-12681 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12680 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12677 | Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability | |
| CVE-2019-12674 | Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities | |
| CVE-2019-12673 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspe | |
| CVE-2019-12631 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | |
| CVE-2019-12630 | Cisco Security Manager Java Deserialization Vulnerability | |
| CVE-2019-12676 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF LSA | |
| CVE-2019-12679 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12682 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12685 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12684 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12687 | Cisco Firepower Management Center Remote Code Execution Vulnerability | |
| CVE-2019-12686 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12690 | Cisco Firepower Management Center Command Injection Vulnerability | |
| CVE-2019-12689 | Cisco Firepower Management Center Remote Code Execution Vulnerability | |
| CVE-2019-12688 | Cisco Firepower Management Center Remote Code Execution Vulnerability | |
| CVE-2019-12693 | Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco Firepower Threat Defense Software
-
CVE-2025-20268
Cisco Secure Firewall Threat Defense Software Geolocation Re -
CVE-2025-20222
Cisco Adaptive Security Appliance Software and Firepower Thr -
CVE-2025-20217
Cisco Firepower Threat Defense Intrusion Detection Denial of -
CVE-2021-1494
Snort 安全漏洞 -
CVE-2021-34753
Cisco Firepower Threat Defense Ethernet Industrial Protocol
Same vendor: Cisco
-
CVE-2026-20320
Cisco BroadWorks OCI解析器XEE漏洞 -
CVE-2026-20327
Cisco Unified Intelligence Center SQL Injection Vulnerabilit -
CVE-2026-20314
Cisco Packaged Contact Center Enterprise & Cisco Unified Con -
CVE-2026-20319
Cisco Secure Workload Software Security Hardening Release Au -
CVE-2026-20315
Cisco Secure Workload Software Security Hardening Release Au
V. Comments for CVE-2019-12675
No comments yet