CVE-2018-0281
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on an affected device, resulting in a brief denial of service (DoS) condition. The vulnerability is due to the incorrect handling of a Transport Layer Security (TLS) extension during TLS connection setup for the affected software. An attacker could exploit this vulnerability by sending a crafted TLS connection setup request to an affected device. A successful exploit could allow the attacker to cause the Snort detection engine on the affected device to restart, resulting in a DoS condition. Cisco Bug IDs: CSCvg97808.
Una vulnerabilidad en el motor de detección de Cisco Firepower System Software podría permitir que un atacante remoto sin autenticar reinicie una instancia del motor de detección Snort en un dispositivo afectado y provoque una breve denegación de servicio (DoS) como consecuencia. Esta vulnerabilidad se debe a una gestión incorrecta de una extensión Transport Layer Security (TLS) durante la configuración de una conexión TLS para el software afectado. Un atacante podría explotar esta vulnerabilidad enviando petición de configuración de conexión TLS a un dispositivo afectado. Un exploit con éxito podría permitir que el atacante provoque el reinicio inesperado del motor de detección de Snort en el sistema afectado, lo que daría como resultado una condición de DoS temporal. Cisco Bug IDs: CSCvg97808.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-11-27 CVE Reserved
- 2018-05-02 CVE Published
- 2024-03-11 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-310: Cryptographic Issues
- CWE-319: Cleartext Transmission of Sensitive Information
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/104096 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 6.1.0 Search vendor "Cisco" for product "Firepower Management Center" and version "6.1.0" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 6.2.0 Search vendor "Cisco" for product "Firepower Management Center" and version "6.2.0" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 6.2.1 Search vendor "Cisco" for product "Firepower Management Center" and version "6.2.1" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 6.2.2 Search vendor "Cisco" for product "Firepower Management Center" and version "6.2.2" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 6.2.3 Search vendor "Cisco" for product "Firepower Management Center" and version "6.2.3" | - |
Affected
|