CVE-2018-0333: Medium severity cisco secure firewall management center vulnerability
A vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass VPN security due to unintended side effects of dynamic configuration changes that could allow an attacker to bypass configured policies. The vulnerability is due to incorrect management of the configured interface names and VPN parameters when dynamic CLI configuration changes are performed. An attacker could exploit this vulnerability by sending packets through an interface on the targeted device. A successful exploit could allow the attacker to bypass configured VPN policies. Cisco Bug IDs: CSCvh49388.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0333?
CVE-2018-0333 has a high severity rating due to its potential to allow unauthorized access to VPN configurations.
How do I fix CVE-2018-0333?
To fix CVE-2018-0333, update Cisco FireSIGHT System Software to the patched version provided by Cisco.
What systems are affected by CVE-2018-0333?
CVE-2018-0333 affects Cisco Secure Firewall Management Center and Cisco Firepower Management Center running version 6.2.2.
Can CVE-2018-0333 be exploited remotely?
Yes, CVE-2018-0333 can be exploited by an unauthenticated, remote attacker.
What impact does CVE-2018-0333 have on VPN security?
CVE-2018-0333 may allow attackers to bypass established VPN security policies, leading to potential unauthorized access.