CVE-2018-0283: Medium severity cisco secure firewall management center vulnerability
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on an affected device, resulting in a brief denial of service (DoS) condition. The vulnerability is due to the incorrect handling of Transport Layer Security (TLS) TCP connection setup for the affected software. An attacker could exploit this vulnerability by sending crafted TLS traffic to an affected device. A successful exploit could allow the attacker to cause the Snort detection engine on the affected device to restart, resulting in a DoS condition. Cisco Bug IDs: CSCvg99327.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0283?
CVE-2018-0283 has a high severity rating due to its potential to cause a denial of service condition.
How do I fix CVE-2018-0283?
To fix CVE-2018-0283, upgrade the affected Cisco Firepower System Software to the latest version provided by Cisco.
What devices are affected by CVE-2018-0283?
CVE-2018-0283 affects Cisco Secure Firewall Management Center and Cisco Firepower Management Center Software versions 6.1.0, 6.2.0, 6.2.2, and 6.2.3.
Can CVE-2018-0283 be exploited remotely?
Yes, CVE-2018-0283 can be exploited by an unauthenticated remote attacker.
What potential impact does CVE-2018-0283 have on affected systems?
The potential impact of CVE-2018-0283 is a brief denial of service condition, which can disrupt service availability.