CVE-2018-0384: Medium severity cisco secure firewall management center vulnerability
A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control policy that is configured to block traffic for an affected system. The vulnerability exists because the affected software incorrectly handles TCP packets that are received out of order when a TCP SYN retransmission is issued. An attacker could exploit this vulnerability by sending a maliciously crafted connection through an affected device. A successful exploit could allow the attacker to bypass a URL-based access control policy that is configured to block traffic for the affected system. Cisco Bug IDs: CSCvh84511.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0384?
CVE-2018-0384 has a severity rating of medium, indicating a moderate risk to affected systems.
How do I fix CVE-2018-0384?
To mitigate CVE-2018-0384, it is recommended to update the Cisco FireSIGHT System Software to the latest version available.
Which Cisco products are affected by CVE-2018-0384?
CVE-2018-0384 affects specific versions of Cisco Secure Firewall Management Center and Cisco Firepower Management Center Software.
Can CVE-2018-0384 be exploited remotely?
Yes, CVE-2018-0384 can be exploited by unauthenticated, remote attackers to bypass access control policies.
What is the nature of CVE-2018-0384 vulnerability?
CVE-2018-0384 is a vulnerability in the detection engine that improperly handles URL-based access control, allowing unauthorized access.