CVE-2018-0333
First published: Thu Jun 07 2018(Updated: )
A vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass VPN security due to unintended side effects of dynamic configuration changes that could allow an attacker to bypass configured policies. The vulnerability is due to incorrect management of the configured interface names and VPN parameters when dynamic CLI configuration changes are performed. An attacker could exploit this vulnerability by sending packets through an interface on the targeted device. A successful exploit could allow the attacker to bypass configured VPN policies. Cisco Bug IDs: CSCvh49388.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Firewall Management Center | =6.2.2 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | =6.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0333?
CVE-2018-0333 has a high severity rating due to its potential to allow unauthorized access to VPN configurations.
How do I fix CVE-2018-0333?
To fix CVE-2018-0333, update Cisco FireSIGHT System Software to the patched version provided by Cisco.
What systems are affected by CVE-2018-0333?
CVE-2018-0333 affects Cisco Secure Firewall Management Center and Cisco Firepower Management Center running version 6.2.2.
Can CVE-2018-0333 be exploited remotely?
Yes, CVE-2018-0333 can be exploited by an unauthenticated, remote attacker.
What impact does CVE-2018-0333 have on VPN security?
CVE-2018-0333 may allow attackers to bypass established VPN security policies, leading to potential unauthorized access.
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure firewall management center
- version/cisco secure firewall management center/6.2.2
- canonical/cisco firepower management center (fmc) and firepower threat defense (ftd) software
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.2.2