PT-2019-1372 · Cisco · Cisco Firepower Management Center

CVE-2018-15458 · Publicado 2019-01-10 · Atualizado 2024-11-26

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (affected versions not specified)

Description The issue is related to errors in resource management in the Shell Access Filter feature of Cisco Firepower Management Center. It could allow a remote attacker to cause a denial of service (DoS) condition by sending a steady stream of remote authentication requests, potentially leading to high disk utilization due to unbounded writes to a system file. This could result in the device operating abnormally and becoming unstable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

CWE-399

Identificadores relacionados

BDU:2019-00733

CVE-2018-15458

Produtos afetados

Cisco Firepower Management Center

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-fpwr-mc-dos · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15458 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00733 · Nota de Segurança
• http://securityfocus.com/bid/106516 · Nota
• https://osv.dev/vulnerability/CVE-2018-15458 · Aviso do Fabricante