PT-2019-1372 · Cisco · Cisco Firepower Management Center

Published 2019-01-10 · Updated 2024-11-26 · CVE-2018-15458

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (affected versions not specified)

Description The issue is related to errors in resource management in the Shell Access Filter feature of Cisco Firepower Management Center. It could allow a remote attacker to cause a denial of service (DoS) condition by sending a steady stream of remote authentication requests, potentially leading to high disk utilization due to unbounded writes to a system file. This could result in the device operating abnormally and becoming unstable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

CWE-399

Related Identifiers

BDU:2019-00733

CVE-2018-15458

Affected Products

Cisco Firepower Management Center

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-fpwr-mc-dos · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15458 · Security Note
• https://bdu.fstec.ru/vul/2019-00733 · Security Note
• https://osv.dev/vulnerability/CVE-2018-15458 · Vendor Advisory
• http://securityfocus.com/bid/106516 · Note