CVE-2018-0281
First published: Wed May 02 2018(Updated: )
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on an affected device, resulting in a brief denial of service (DoS) condition. The vulnerability is due to the incorrect handling of a Transport Layer Security (TLS) extension during TLS connection setup for the affected software. An attacker could exploit this vulnerability by sending a crafted TLS connection setup request to an affected device. A successful exploit could allow the attacker to cause the Snort detection engine on the affected device to restart, resulting in a DoS condition. Cisco Bug IDs: CSCvg97808.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Firewall Management Center | =6.1.0 | |
| Cisco Secure Firewall Management Center | =6.2.0 | |
| Cisco Secure Firewall Management Center | =6.2.1 | |
| Cisco Secure Firewall Management Center | =6.2.2 | |
| Cisco Secure Firewall Management Center | =6.2.3 | |
| Cisco Firepower Management Center Software | =6.1.0 | |
| Cisco Firepower Management Center Software | =6.2.0 | |
| Cisco Firepower Management Center Software | =6.2.1 | |
| Cisco Firepower Management Center Software | =6.2.2 | |
| Cisco Firepower Management Center Software | =6.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0281?
CVE-2018-0281 has a medium severity rating due to its potential to cause a denial of service condition.
How do I fix CVE-2018-0281?
To fix CVE-2018-0281, upgrade the affected Cisco Firepower Management Center or Secure Firewall Management Center to a version that addresses this vulnerability.
What systems are affected by CVE-2018-0281?
CVE-2018-0281 affects multiple versions of Cisco Firepower Management Center and Cisco Secure Firewall Management Center software.
Can CVE-2018-0281 be exploited remotely?
Yes, CVE-2018-0281 can be exploited by an unauthenticated, remote attacker.
What impact does CVE-2018-0281 have on systems?
CVE-2018-0281 may cause a brief denial of service condition by allowing the attacker to restart the Snort detection engine on affected devices.
- agent/weakness
- agent/references
- agent/type
- agent/severity
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/event
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure firewall management center
- version/cisco secure firewall management center/6.1.0
- version/cisco secure firewall management center/6.2.0
- version/cisco secure firewall management center/6.2.1
- version/cisco secure firewall management center/6.2.2
- version/cisco secure firewall management center/6.2.3
- canonical/cisco firepower management center software
- version/cisco firepower management center software/6.1.0
- version/cisco firepower management center software/6.2.0
- version/cisco firepower management center software/6.2.1
- version/cisco firepower management center software/6.2.2
- version/cisco firepower management center software/6.2.3