// For flags

CVE-2018-0370

 

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause one of the detection engine processes to run out of memory and thus slow down traffic processing. The vulnerability is due to improper handling of traffic when the Secure Sockets Layer (SSL) inspection policy is enabled. An attacker could exploit this vulnerability by sending malicious traffic through an affected device. An exploit could allow the attacker to increase the resource consumption of a single instance of the Snort detection engine on an affected device. This will lead to performance degradation and eventually the restart of the affected Snort process. Cisco Bug IDs: CSCvi09219, CSCvi29845.

Una vulnerabilidad en el motor de detección de Cisco Firepower System Software podría permitir que un atacante remoto sin autenticar provoque que uno de los procesos del motor de detección se quede sin memoria y, así, ralentice el procesamiento de tráfico. La vulnerabilidad se debe a la gestión incorrecta de tráfico cuando la política de inspección SSL (Secure Sockets Layer) está habilitada. Un atacante podría explotar esta vulnerabilidad enviando tráfico malicioso a través del dispositivo afectado. Su explotación podría permitir que el atacante aumente el consumo de recursos de una sola instancia del motor de detección de Snort en un dispositivo afectado. Esto conducirá a una degradación del rendimiento y, finalmente, al reinicio del proceso Snort afectado. Cisco Bug IDs: CSCvi09219, CSCvi29845.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2017-11-27 CVE Reserved
  • 2018-07-16 CVE Published
  • 2024-05-25 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-399: Resource Management Errors
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
 Firepower Management Center
Search vendor "Cisco" for product "Firepower Management Center"
 6.1.0.7
Search vendor "Cisco" for product "Firepower Management Center" and version "6.1.0.7"
-
Affected
Cisco
Search vendor "Cisco"
 Firepower Management Center
Search vendor "Cisco" for product "Firepower Management Center"
 6.2.0.5
Search vendor "Cisco" for product "Firepower Management Center" and version "6.2.0.5"
-
Affected
Cisco
Search vendor "Cisco"
 Firepower Management Center
Search vendor "Cisco" for product "Firepower Management Center"
 6.2.2.2
Search vendor "Cisco" for product "Firepower Management Center" and version "6.2.2.2"
-
Affected