CVE-2018-0297
CVE-2018-0297
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.2%KEV nãoPoC —Patch —
Lifecycle
17 May 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured Secure Sockets Layer (SSL) Access Control (AC) policy to block SSL traffic. The vulnerability is due to the incorrect handling of TCP SSL packets received out of order. An attacker could exploit this vulnerability by sending a crafted SSL connection through the affected device. A successful exploit could allow the attacker to bypass a configured SSL AC policy to block SSL traffic. Cisco Bug IDs: CSCvg09316.
Affected products
n/a · Cisco Firepower Threat Defense SoftwareWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →