CVE:CVE-2019-12700
CNNVD:CNNVD-201910-083
Cisco FTD、Cisco FMC和FXOS Software中的Pluggable Authentication Module的配置存在资源管理错误漏洞。远程攻击者可通过连接到受影响设备并同时进行多个SSH登录利用该漏洞造成拒绝服务。
solution:Upgrade cisco firepower_9300_firmware to a higher version than r114,r241,and avoid the version r114,r241; Upgrade cisco firepower_extensible_operating_system to a higher version than 2.2,2.3.1.155,2.6.1.131,and avoid the version (,2.2],[2.3,2.3.1.155),[2.4,2.6.1.131); Upgrade cisco firepower_management_center to a higher version than 6.1.0,6.2.3.14,6.2.3.7,and avoid the version (,6.1.0],[6.2.0,6.2.3.14),[6.2.3,6.2.3.7); Upgrade cisco firepower_threat_defense to a higher version than 6.1.0,6.2.3.14,6.2.2.5,6.2.3.7,and avoid the version (,6.1.0],[6.2.0,6.2.3.14),[6.2.0,6.2.2.5),[6.2.3,6.2.3.7)