// For flags

CVE-2017-3887

 

Severity Score

5.9
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco Firepower System Software prior to the first fixed release when it is configured with an SSL Decrypt-Resign policy. More Information: CSCvb62292. Known Affected Releases: 6.0.1 6.1.0 6.2.0. Known Fixed Releases: 6.2.0 6.1.0.2.

Una vulnerabilidad en el motor de detección que maneja los paquetes de Secure Sockets Layer (SSL) para el software Cisco Firepower System podría permitir que un atacante remoto no autenticado provoque una condición de denegación de servicio porque el proceso de Snort se reinicia inesperadamente. Esta vulnerabilidad afecta al software Cisco Firepower System antes de la primera versión fija cuando está configurada con una directiva Decrypt-Resign de SSL. Más información: CSCvb62292. Lanzamientos afectados conocidos: 6.0.1 6.1.0 6.2.0. Lanzamientos fijos conocidos: 6.2.0 6.1.0.2.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-12-21 CVE Reserved
  • 2017-04-07 CVE Published
  • 2024-08-05 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-755: Improper Handling of Exceptional Conditions
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
 Firepower Threat Defense
Search vendor "Cisco" for product "Firepower Threat Defense"
 6.0.1
Search vendor "Cisco" for product "Firepower Threat Defense" and version "6.0.1"
-
Affected
Cisco
Search vendor "Cisco"
 Firepower Threat Defense
Search vendor "Cisco" for product "Firepower Threat Defense"
 6.1.0
Search vendor "Cisco" for product "Firepower Threat Defense" and version "6.1.0"
-
Affected
Cisco
Search vendor "Cisco"
 Firepower Threat Defense
Search vendor "Cisco" for product "Firepower Threat Defense"
 6.2.0
Search vendor "Cisco" for product "Firepower Threat Defense" and version "6.2.0"
-
Affected