CVE-2018-0283
First published: Wed May 02 2018(Updated: )
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to restart an instance of the Snort detection engine on an affected device, resulting in a brief denial of service (DoS) condition. The vulnerability is due to the incorrect handling of Transport Layer Security (TLS) TCP connection setup for the affected software. An attacker could exploit this vulnerability by sending crafted TLS traffic to an affected device. A successful exploit could allow the attacker to cause the Snort detection engine on the affected device to restart, resulting in a DoS condition. Cisco Bug IDs: CSCvg99327.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Firewall Management Center | =6.1.0 | |
| Cisco Secure Firewall Management Center | =6.2.0 | |
| Cisco Secure Firewall Management Center | =6.2.2 | |
| Cisco Secure Firewall Management Center | =6.2.3 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.1.0 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.2.0 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.2.2 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0283?
CVE-2018-0283 has a high severity rating due to its potential to cause a denial of service condition.
How do I fix CVE-2018-0283?
To fix CVE-2018-0283, upgrade the affected Cisco Firepower System Software to the latest version provided by Cisco.
What devices are affected by CVE-2018-0283?
CVE-2018-0283 affects Cisco Secure Firewall Management Center and Cisco Firepower Management Center Software versions 6.1.0, 6.2.0, 6.2.2, and 6.2.3.
Can CVE-2018-0283 be exploited remotely?
Yes, CVE-2018-0283 can be exploited by an unauthenticated remote attacker.
What potential impact does CVE-2018-0283 have on affected systems?
The potential impact of CVE-2018-0283 is a brief denial of service condition, which can disrupt service availability.
- agent/weakness
- agent/references
- agent/type
- agent/severity
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure firewall management center
- version/cisco secure firewall management center/6.1.0
- version/cisco secure firewall management center/6.2.0
- version/cisco secure firewall management center/6.2.2
- version/cisco secure firewall management center/6.2.3
- canonical/cisco firepower management center (fmc) and firepower threat defense (ftd) software
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.1.0
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.2.0
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.2.2
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.2.3