CVE-2019-1982

CVE-2019-1982 describes a bypass vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software. An unauthenticated, remote attacker can exploit this by sending maliciously crafted HTTP headers, including over HTTPS, to bypass filtering protections. This medium-severity vulnerability (CVSS 5.3) allows attackers to deliver malicious content to protected systems that would otherwise be blocked. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.