CVE-2019-1980

A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper detection of the initial use of a protocol on a nonstandard port. An attacker could exploit this vulnerability by sending traffic on a nonstandard port for the protocol in use through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems that would otherwise be blocked. Once the initial protocol flow on the nonstandard port is detected, future flows on the nonstandard port will be successfully detected and handled as configured by the applied policy.

• CWE-264
• CWE-287

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-nspdVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-nspdVendor Advisory

Published

Nov 5, 2019

Last Modified

Aug 11, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19793In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3…8.8
• CVE-2019-19794The miekg Go DNS package before 1.1.25, as used in CoreDNS b…5.9
• CVE-2019-19795samurai 0.7 has a heap-based buffer overflow in canonpath in…7.8
• CVE-2019-19796Yabasic 2.86.2 has a heap-based buffer overflow in myformat …7.8
• CVE-2019-19797read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of…5.5
• CVE-2019-19799Zoho ManageEngine Applications Manager before 14600 allows a…5.3
• CVE-2019-19800Zoho ManageEngine Applications Manager 14 before 14520 allow…5.3
• CVE-2019-19801In Gallagher Command Centre Server versions of v8.10 prior t…5.5
• CVE-2019-19802In Gallagher Command Centre Server v8.10 prior to v8.10.1134…6.5
• CVE-2019-19805_account_forgot_password.ajax.php in MFScripts YetiShare 3.5…5.3
• CVE-2019-19806_account_forgot_password.ajax.php in MFScripts YetiShare 3.5…5.3
• CVE-2019-19807In the Linux kernel before 5.3.11, sound/core/timer.c has a …7.8