5.3

CVE-2018-0254

EPSS 1.23%
Veröffentlicht 19.04.2018 20:29:01
Zuletzt bearbeitet 11.08.2026 19:33:44
Erkennungen
Login

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an Intelligent Application Bypass (IAB) with a drop percentage threshold is also configured. The vulnerability is due to incorrect counting of the percentage of dropped traffic. An attacker could exploit this vulnerability by sending network traffic to a targeted device. An exploit could allow the attacker to bypass configured file action policies, and traffic that should be dropped could be allowed into the network. Cisco Bug IDs: CSCvf86435.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Secure Firewall Threat Defense Version 6.1.0.5

   Cisco ≫ Amp 7150 Version -
   Cisco ≫ Amp 8150 Version -
   Cisco ≫ Firepower Appliance 7010 Version -
   Cisco ≫ Firepower Appliance 7020 Version -
   Cisco ≫ Firepower Appliance 7030 Version -
   Cisco ≫ Firepower Appliance 7050 Version -
   Cisco ≫ Firepower Appliance 7110 Version -
   Cisco ≫ Firepower Appliance 7115 Version -
   Cisco ≫ Firepower Appliance 7120 Version -
   Cisco ≫ Firepower Appliance 7125 Version -
   Cisco ≫ Firepower Appliance 8120 Version -
   Cisco ≫ Firepower Appliance 8130 Version -
   Cisco ≫ Firepower Appliance 8140 Version -
   Cisco ≫ Firepower Appliance 8250 Version -
   Cisco ≫ Firepower Appliance 8260 Version -
   Cisco ≫ Firepower Appliance 8270 Version -
   Cisco ≫ Firepower Appliance 8290 Version -
   Cisco ≫ Firepower Appliance 8350 Version -
   Cisco ≫ Firepower Appliance 8360 Version -
   Cisco ≫ Firepower Appliance 8370 Version -
   Cisco ≫ Firepower Appliance 8390 Version -
   Cisco ≫ Firepower Management Center 1000 Version -
   Cisco ≫ Firepower Management Center 2000 Version -
   Cisco ≫ Firepower Management Center 2500 Version -
   Cisco ≫ Firepower Management Center 4000 Version -
   Cisco ≫ Firepower Management Center 4500 Version -
   Cisco ≫ Firesight Management Center 1500 Version -
   Cisco ≫ Firesight Management Center 3500 Version -
   Cisco ≫ Firesight Management Center 750 Version -
   Cisco ≫ Ngips Virtual Appliance Version -

Cisco ≫ Secure Firewall Threat Defense Version 6.2.0.2

   Cisco ≫ Amp 7150 Version -
   Cisco ≫ Amp 8150 Version -
   Cisco ≫ Firepower Appliance 7010 Version -
   Cisco ≫ Firepower Appliance 7020 Version -
   Cisco ≫ Firepower Appliance 7030 Version -
   Cisco ≫ Firepower Appliance 7050 Version -
   Cisco ≫ Firepower Appliance 7110 Version -
   Cisco ≫ Firepower Appliance 7115 Version -
   Cisco ≫ Firepower Appliance 7120 Version -
   Cisco ≫ Firepower Appliance 7125 Version -
   Cisco ≫ Firepower Appliance 8120 Version -
   Cisco ≫ Firepower Appliance 8130 Version -
   Cisco ≫ Firepower Appliance 8140 Version -
   Cisco ≫ Firepower Appliance 8250 Version -
   Cisco ≫ Firepower Appliance 8260 Version -
   Cisco ≫ Firepower Appliance 8270 Version -
   Cisco ≫ Firepower Appliance 8290 Version -
   Cisco ≫ Firepower Appliance 8350 Version -
   Cisco ≫ Firepower Appliance 8360 Version -
   Cisco ≫ Firepower Appliance 8370 Version -
   Cisco ≫ Firepower Appliance 8390 Version -
   Cisco ≫ Firepower Management Center 1000 Version -
   Cisco ≫ Firepower Management Center 2000 Version -
   Cisco ≫ Firepower Management Center 2500 Version -
   Cisco ≫ Firepower Management Center 4000 Version -
   Cisco ≫ Firepower Management Center 4500 Version -
   Cisco ≫ Firesight Management Center 1500 Version -
   Cisco ≫ Firesight Management Center 3500 Version -
   Cisco ≫ Firesight Management Center 750 Version -
   Cisco ≫ Ngips Virtual Appliance Version -

Cisco ≫ Secure Firewall Threat Defense Version 6.2.1

   Cisco ≫ Amp 7150 Version -
   Cisco ≫ Amp 8150 Version -
   Cisco ≫ Firepower Appliance 7010 Version -
   Cisco ≫ Firepower Appliance 7020 Version -
   Cisco ≫ Firepower Appliance 7030 Version -
   Cisco ≫ Firepower Appliance 7050 Version -
   Cisco ≫ Firepower Appliance 7110 Version -
   Cisco ≫ Firepower Appliance 7115 Version -
   Cisco ≫ Firepower Appliance 7120 Version -
   Cisco ≫ Firepower Appliance 7125 Version -
   Cisco ≫ Firepower Appliance 8120 Version -
   Cisco ≫ Firepower Appliance 8130 Version -
   Cisco ≫ Firepower Appliance 8140 Version -
   Cisco ≫ Firepower Appliance 8250 Version -
   Cisco ≫ Firepower Appliance 8260 Version -
   Cisco ≫ Firepower Appliance 8270 Version -
   Cisco ≫ Firepower Appliance 8290 Version -
   Cisco ≫ Firepower Appliance 8350 Version -
   Cisco ≫ Firepower Appliance 8360 Version -
   Cisco ≫ Firepower Appliance 8370 Version -
   Cisco ≫ Firepower Appliance 8390 Version -
   Cisco ≫ Firepower Management Center 1000 Version -
   Cisco ≫ Firepower Management Center 2000 Version -
   Cisco ≫ Firepower Management Center 2500 Version -
   Cisco ≫ Firepower Management Center 4000 Version -
   Cisco ≫ Firepower Management Center 4500 Version -
   Cisco ≫ Firesight Management Center 1500 Version -
   Cisco ≫ Firesight Management Center 3500 Version -
   Cisco ≫ Firesight Management Center 750 Version -
   Cisco ≫ Ngips Virtual Appliance Version -

Cisco ≫ Secure Firewall Threat Defense Version 6.2.2

   Cisco ≫ Amp 7150 Version -
   Cisco ≫ Amp 8150 Version -
   Cisco ≫ Firepower Appliance 7010 Version -
   Cisco ≫ Firepower Appliance 7020 Version -
   Cisco ≫ Firepower Appliance 7030 Version -
   Cisco ≫ Firepower Appliance 7050 Version -
   Cisco ≫ Firepower Appliance 7110 Version -
   Cisco ≫ Firepower Appliance 7115 Version -
   Cisco ≫ Firepower Appliance 7120 Version -
   Cisco ≫ Firepower Appliance 7125 Version -
   Cisco ≫ Firepower Appliance 8120 Version -
   Cisco ≫ Firepower Appliance 8130 Version -
   Cisco ≫ Firepower Appliance 8140 Version -
   Cisco ≫ Firepower Appliance 8250 Version -
   Cisco ≫ Firepower Appliance 8260 Version -
   Cisco ≫ Firepower Appliance 8270 Version -
   Cisco ≫ Firepower Appliance 8290 Version -
   Cisco ≫ Firepower Appliance 8350 Version -
   Cisco ≫ Firepower Appliance 8360 Version -
   Cisco ≫ Firepower Appliance 8370 Version -
   Cisco ≫ Firepower Appliance 8390 Version -
   Cisco ≫ Firepower Management Center 1000 Version -
   Cisco ≫ Firepower Management Center 2000 Version -
   Cisco ≫ Firepower Management Center 2500 Version -
   Cisco ≫ Firepower Management Center 4000 Version -
   Cisco ≫ Firepower Management Center 4500 Version -
   Cisco ≫ Firesight Management Center 1500 Version -
   Cisco ≫ Firesight Management Center 3500 Version -
   Cisco ≫ Firesight Management Center 750 Version -
   Cisco ≫ Ngips Virtual Appliance Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.23%	0.65

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.3	3.9	1.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

http://www.securityfocus.com/bid/103940

Third Party Advisory

VDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fss2

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-0254

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-0254

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-0254

EUVD