CVE-2019-1669— Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability
Quick assessment
Affected
Cisco Cisco Firepower Threat Defense Software
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Firepower Threat Defense（FTD）Software是由美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。data acquisition（DAQ）是其中的一个数据采集组件。 Cisco FTD Software 6.3.0版本（Firepower 4100或Firepower 9300 Series平台上）中的DAQ组件存在安全漏洞，该漏洞源于程序没有正确地管理系统内存资源。远程攻击者可利用该漏洞绕过所配置的访问控制策略或造成拒绝服务。
Possible ATT&CK Techniques 2 AI
T1499 · Endpoint Denial of Service T1041 · Exfiltration Over C2 Channel
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-1669
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the data acquisition (DAQ) component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service (DoS) condition. The vulnerability exists because the affected software improperly manages system memory resources when inspecting traffic. An attacker could exploit this vulnerability by generating specific traffic patterns for the software to inspect. A successful exploit could allow the attacker to exhaust system memory resources used for traffic inspection. Depending on the configuration, the FTD Software could fail open and cease to inspect traffic or fail closed and result in a DoS condition. This vulnerability may require manual intervention to restore the software.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
保护机制失效
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Firepower Threat Defense Software data acquisition组件安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Firepower Threat Defense（FTD）Software是由美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。data acquisition（DAQ）是其中的一个数据采集组件。 Cisco FTD Software 6.3.0版本（Firepower 4100或Firepower 9300 Series平台上）中的DAQ组件存在安全漏洞，该漏洞源于程序没有正确地管理系统内存资源。远程攻击者可利用该漏洞绕过所配置的访问控制策略或造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Firepower Threat Defense Software | n/a | - |
|
II. Public POCs for CVE-2019-1669
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1669
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-1669 (2)
-
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-firepowertds-bypass vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2019-01-24 · 14 CVEs total
| CVE-2019-1652 | Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability | |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | |
| CVE-2019-1655 | Cisco Webex Meetings Server Cross-Site Scripting Vulnerability | |
| CVE-2019-1656 | Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability | |
| CVE-2019-1657 | Cisco AMP Threat Grid API Key Information Disclosure Vulnerability | |
| CVE-2019-1658 | Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability | |
| CVE-2019-1668 | Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerability | |
| CVE-2019-1645 | Cisco Connected Mobile Experiences Information Disclosure Vulnerability | |
| CVE-2019-1646 | Privilege Escalation Vulnerability in Cisco SD-WAN Solution | |
| CVE-2019-1647 | Cisco SD-WAN Solution Unauthorized Access Vulnerability | |
| CVE-2019-1648 | Cisco SD-WAN Solution Privilege Escalation Vulnerability | |
| CVE-2019-1650 | Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability | |
| CVE-2019-1651 | Cisco SD-WAN Solution Buffer Overflow Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Firepower Threat Defense Software
-
CVE-2025-20268
Cisco Secure Firewall Threat Defense Software Geolocation Re -
CVE-2025-20222
Cisco Adaptive Security Appliance Software and Firepower Thr -
CVE-2025-20217
Cisco Firepower Threat Defense Intrusion Detection Denial of -
CVE-2021-1494
Snort 安全漏洞 -
CVE-2021-34753
Cisco Firepower Threat Defense Ethernet Industrial Protocol
Same vendor: Cisco
-
CVE-2026-76472
Cisco Meraki Security Hardening Release October 2026 - Impro -
CVE-2026-76467
Cisco Meraki Software Hardening Release - Resource Lifetime -
CVE-2026-76470
Cisco Meraki Hardening Release - Incorrect Calculation Vulne -
CVE-2026-76469
Cisco Meraki Security Hardening Release: October 2026 Insuff -
CVE-2026-76468
Cisco Meraki Hardening Release - Input Validation Vulnerabil
Same weakness: CWE-693
-
CVE-2026-16916
Security vulnerabilities have been found in IBM Verify Ident -
CVE-2026-107697
FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via pa -
CVE-2026-76283
Protection Mechanism Failure in Splunk Enterprise -
CVE-2026-97673
Langflow OSS is affected by multiple vulnerabilities -
CVE-2026-97678
Langflow OSS is affected by multiple vulnerabilities
V. Comments for CVE-2019-1669
No comments yet