CVE-2019-1695: Cisco Adaptive Security Appliance and Firepower Threat Defense Software Layer 2 Filtering Bypass Vulnerability

Security readout for executives and security teams

CVE-2019-1695 is a Cisco ASA and Firepower Threat Defense filtering bypass. An attacker on the same adjacent network as the management interface could get certain Ethernet frames past Layer 2 filtering and reach the device kernel. It is not listed as KEV in the provided sources. Exposure is most relevant where Cisco ASA or FTD management interfaces are reachable from shared or insufficiently trusted Layer 2 segments. The affected version data in the bundle is unspecified, so asset owners must verify releases against Cisco guidance. Treat this as a bounded but meaningful network-appliance risk. It does not indicate remote internet exploitation in the provided sources, but exposed management interfaces on shared networks should be reviewed promptly because the target devices are security controls. Mitigation focus: Review Cisco advisory for affected releases, fixed software, and official mitigation guidance.; Inventory Cisco ASA and FTD devices, including management interface network placement.; Restrict management interface Layer 2 adjacency to trusted administrative networks only..

Prepared

Jun 1, 2026, 14:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.