[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzyTkA46JcJWJcYqVxuJuvtmMjDNd2b5RO0PM0qDPyxs":3,"g5a-risk:CVE-2019-1708":186},{"success":4,"data":5,"meta":184},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":43,"references":82,"referencesCount":94,"weaknesses":95,"weaknessesCount":94,"isActivelyExploited":110,"cisaInfo":26,"otxData":26,"relatedBlogPosts":111,"seoMetadata":112,"configurations":137,"relatedVendorCves":182,"notableEvents":183},"CVE-2019-1708","What is CVE-2019-1708?","A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to the incorrect processing of certain MOBIKE packets. An attacker could exploit this vulnerability by sending crafted MOBIKE packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. The MOBIKE feature is supported only for IPv4 addresses.","A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Sof...","2019-05-03T16:29:00.68","2023-08-15T15:24:56.34",8.6,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH",null,3.9,4,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"ykramarz@cisco.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:N\u002FI:N\u002FA:H",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:C","COMPLETE",7.8,10,6.9,0.02056,[45,45,45,45,45,45,45],"High",[49,54,57,61,64,67,70,73,76,79],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"cisco","firepower_threat_defense","*","cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",{"vendor":50,"product":55,"version":52,"criteria":56,"vulnerable":4},"adaptive_security_appliance_software","cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",{"vendor":50,"product":58,"version":59,"criteria":60,"vulnerable":4},"asa-5506-x","-","cpe:2.3:h:cisco:asa-5506-x:-:*:*:*:*:*:*:*",{"vendor":50,"product":62,"version":59,"criteria":63,"vulnerable":4},"asa-5525-x","cpe:2.3:h:cisco:asa-5525-x:-:*:*:*:*:*:*:*",{"vendor":50,"product":65,"version":59,"criteria":66,"vulnerable":4},"asa-5555-x","cpe:2.3:h:cisco:asa-5555-x:-:*:*:*:*:*:*:*",{"vendor":50,"product":68,"version":59,"criteria":69,"vulnerable":4},"asa_5506h-x","cpe:2.3:h:cisco:asa_5506h-x:-:*:*:*:*:*:*:*",{"vendor":50,"product":71,"version":59,"criteria":72,"vulnerable":4},"asa_5506w-x","cpe:2.3:h:cisco:asa_5506w-x:-:*:*:*:*:*:*:*",{"vendor":50,"product":74,"version":59,"criteria":75,"vulnerable":4},"asa_5508-x","cpe:2.3:h:cisco:asa_5508-x:-:*:*:*:*:*:*:*",{"vendor":50,"product":77,"version":59,"criteria":78,"vulnerable":4},"asa_5516-x","cpe:2.3:h:cisco:asa_5516-x:-:*:*:*:*:*:*:*",{"vendor":50,"product":80,"version":59,"criteria":81,"vulnerable":4},"asa_5545-x","cpe:2.3:h:cisco:asa_5545-x:-:*:*:*:*:*:*:*",[83,89],{"url":84,"source":85,"tags":86},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108166","Securityfocus",[87,88],"Third Party Advisory","VDB Entry",{"url":90,"source":91,"tags":92},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20190501-asa-ftd-ike-dos","Cisco",[93],"Vendor Advisory",2,[96,104],{"id":97,"name":98,"description":99,"extendedDescription":100,"status":101,"abstraction":102,"structure":103},"CWE-404","Improper Resource Shutdown or Release","The product does not release or incorrectly releases a resource before it is made available for re-use.","When a resource is created or allocated, the developer is responsible for properly releasing the resource as well as accounting for all potential paths of expiration or invalidation, such as a set period of time or revocation.","Draft","Class","Simple",{"id":105,"name":106,"description":107,"extendedDescription":108,"status":101,"abstraction":109,"structure":103},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.","This is often triggered by improper handling of malformed data or unexpectedly interrupted sessions.  In some languages, developers are responsible for tracking memory allocation and releasing the memory.  If there are no more pointers or references to the memory, then it can no longer be tracked and identified for release.","Variant",false,[],{"title":113,"metaDescription":114,"keywords":115,"canonicalUrl":116,"structuredData":117},"What is CVE-2019-1708? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-1708, a high severity cyber security vulnerability from 2019. A vulnerability in the Internet Key Exchange Version 2 Mobil...","CVE-2019-1708, CVE-2019-1708 vulnerability, CVE-2019-1708 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, cisco security, firepower_threat_defense vulnerability, adaptive_security_appliance_software vulnerability, asa-5506-x vulnerability, asa-5525-x vulnerability, asa-5555-x vulnerability","\u002Fwhat-is\u002Fcve-2019-1708",{"@context":118,"@type":119,"headline":113,"description":114,"datePublished":10,"dateModified":11,"author":120,"publisher":124,"about":128,"mainEntityOfPage":132,"articleSection":135,"keywords":136},"https:\u002F\u002Fschema.org","TechArticle",{"@type":121,"name":122,"url":123},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":121,"name":122,"url":123,"logo":125},{"@type":126,"url":127},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":129,"name":6,"description":130,"additionalType":131},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":133,"@id":134},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-1708","Cybersecurity","CVE-2019-1708, CVE-2019-1708 vulnerability, CVE-2019-1708 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[138],{"Operator":139,"Negate":26,"Nodes":140},"AND",[141,164],{"Operator":142,"Negate":26,"CPEMatch":143},"OR",[144,148,152,156,160],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":146,"VersionEndExcluding":26,"VersionEndIncluding":147},"660EA1E6-E045-47EA-81D9-6B7199129B20","6.2.2","6.2.3.12",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":149,"VersionStartExcluding":26,"VersionStartIncluding":150,"VersionEndExcluding":26,"VersionEndIncluding":151},"20F76E4C-C428-4360-89B5-CD23332D7878","6.3.0","6.3.0.3",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":153,"VersionStartExcluding":26,"VersionStartIncluding":154,"VersionEndExcluding":26,"VersionEndIncluding":155},"730A1D46-E66F-440A-B756-007C73BF97A6","9.8","9.8.4",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":157,"VersionStartExcluding":26,"VersionStartIncluding":158,"VersionEndExcluding":26,"VersionEndIncluding":159},"6A250526-6A3F-4C3B-A4DC-078A360924E9","9.9","9.9.2.50",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":161,"VersionStartExcluding":26,"VersionStartIncluding":162,"VersionEndExcluding":26,"VersionEndIncluding":163},"E4DDEA4A-D45F-4AE0-82AB-2FB75E9A344D","9.10","9.10.1.17",{"Operator":142,"Negate":26,"CPEMatch":165},[166,168,170,172,174,176,178,180],{"Vulnerable":26,"Criteria":60,"MatchCriteriaID":167,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4916B846-AEAD-4C06-9705-048627F27236",{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"45A11CA4-D93C-4D32-81C7-E3CF71EC4BBB",{"Vulnerable":26,"Criteria":66,"MatchCriteriaID":171,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A567EFB6-9A19-4BC0-8EE2-6E2219D09961",{"Vulnerable":26,"Criteria":69,"MatchCriteriaID":173,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"30AC6907-3091-409F-967D-64A82A0C5A8C",{"Vulnerable":26,"Criteria":72,"MatchCriteriaID":175,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D11AF728-8EB0-45EB-A7DD-F2D52B3BB7B8",{"Vulnerable":26,"Criteria":75,"MatchCriteriaID":177,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"92AE506A-E710-465B-B795-470FDE0E0ECA",{"Vulnerable":26,"Criteria":78,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1E07AF10-FFB2-4AC7-BBE7-199C3EFED81F",{"Vulnerable":26,"Criteria":81,"MatchCriteriaID":181,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"57179F60-E330-4FF0-9664-B1E4637FF210",[],[],{"lastModified":11,"cacheTime":185,"version":39},1792372475582,{"score":187,"band":188,"action":189,"scoredAt":190},47,"Medium","Plan remediation","2026-10-16T06:46:04.645868+00:00"]