CVE-2019-1695

CVE-2019-1695 is a medium-severity vulnerability in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software that allows an unauthenticated, adjacent attacker to bypass Layer 2 filters and send data directly to the kernel. The vulnerability stems from improper filtering of Ethernet frames sent to the management interface. A successful exploit could lead to a specific syslog entry being generated on the affected device, indicating a potential compromise of the device's kernel. The vulnerability has a CVSS score of 6.5 (Medium) with an attack vector of adjacent (AV:A) and low attack complexity (AC:L), requiring no user interaction (UI:N). The potential impact is high integrity (I:H) due to the ability to send data directly to the kernel, though confidentiality (C:N) and availability (A:N) are not directly impacted. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community attention, with no social media discussion or media coverage reported.