CVE:CVE-2019-1704
CNNVD:CNNVD-201905-007
Cisco Firepower 4100 Series等都是美国思科（Cisco）公司的产品。Cisco Firepower 4100 Series是一款4100系列的防火墙设备。Cisco 3000 Series Industrial Security Appliances是一款3000系列防火墙设备。Cisco ASA 5500-X Series Firewalls是一款5500-X系列防火墙设备。FTD Software是其中的一套提供下一代防火墙服务的统一软件。
Cisco FTD中的Server Message Block (SMB) Protocol preprocessor detection engine存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。以下产品及版本受到影响：Cisco 3000 Series Industrial Security Appliances (ISAs)；Adaptive Security Appliance (ASA) 5500-X Series Firewalls；ASA 5500-X Series with FirePOWER Services；Advanced Malware Protection (AMP) for Networks for FirePOWER 7000 Series Appliances；AMP for Networks for FirePOWER 8000 Series Appliances；Firepower 2100 Series；Firepower 4100 Series；FirePOWER 7000 Series Appliances；FirePOWER 8000 Series Appliances；Firepower 9300 Security Appliances；Firepower Threat Defense for Integrated Services Routers (ISRs)；FTD Virtual (FTDv)；Next-Generation Intrusion Prevention System (NGIPS)。
solution:Upgrade cisco firepower_threat_defense to a higher version than 6.2.3.12,and avoid the version [6.0.0,6.2.3.12)