PT-2018-8725 · Cisco · Cisco Firepower System

Published 2018-05-02 · Updated 2024-11-26 · CVE-2018-0283

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software (affected versions not specified)

Description: A flaw in the detection engine could allow an unauthenticated, remote attacker to restart the Snort detection engine, resulting in a brief denial of service (DoS) condition. This issue is due to the incorrect handling of Transport Layer Security (TLS) TCP connection setup. An attacker could exploit this by sending crafted TLS traffic. A successful exploit could cause the Snort detection engine to restart, resulting in a DoS condition.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-310

CWE-319

Related Identifiers

CVE-2018-0283

Affected Products

Cisco Firepower System

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-fpwr-codp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0283 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0283 · Security Note
• http://securityfocus.com/bid/104121 · Note