CVE-2018-0138: Medium severity Cisco Firepower Threat Defense vulnerability
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block files transmitted to an affected device via the BitTorrent protocol. The vulnerability exists because the affected software does not detect BitTorrent handshake messages correctly. An attacker could exploit this vulnerability by sending a crafted BitTorrent connection request to an affected device. A successful exploit could allow the attacker to bypass file policies that are configured to block files transmitted to the affected device via the BitTorrent protocol. Cisco Bug IDs: CSCve26946.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cisco Firepower System Softwareto a version that resolves this vulnerability.Patch CSCve26946
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0138?
CVE-2018-0138 has been classified with a medium severity level.
How do I fix CVE-2018-0138?
To address CVE-2018-0138, you should upgrade the Cisco Firepower Threat Defense to version 6.2.4 or later.
What devices are affected by CVE-2018-0138?
CVE-2018-0138 affects Cisco Firepower Threat Defense versions 6.1.0, 6.2.0, 6.2.2, and 6.2.3.
Can CVE-2018-0138 be exploited remotely?
Yes, CVE-2018-0138 can be exploited by unauthenticated remote attackers.
What type of attack does CVE-2018-0138 enable?
CVE-2018-0138 enables attackers to bypass file policies blocking BitTorrent protocol transmissions.