CVE-2018-0297CWE-693

CVE-2018-0297

Medium · published May 17, 2018

CVSS v3.0
5.8
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured Secure Sockets Layer (SSL) Access Control (AC) policy to block SSL traffic. The vulnerability is due to the incorrect handling of TCP SSL packets received out of order. An attacker could exploit this vulnerability by sending a crafted SSL connection through the affected device. A successful exploit could allow the attacker to bypass a configured SSL AC policy to block SSL traffic. Cisco Bug IDs: CSCvg09316.

The record
Technical detail
CVSS v3.0
5.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.6th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2018-05-17T07:29Z
Affected products (4)
ProductVersionsFixed in
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
References (4)
http://www.securityfocus.com/bid/104197 · [email protected]https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-firepwr-pb · [email protected]http://www.securityfocus.com/bid/104197 · af854a3a-2127-422b-91ae-364da2661108https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-firepwr-pb · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 17 MAY 03:00Z
    A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured…
    cvelistv5