NexaPulse
Subscribe
7.1highHigh

CVE-2017-6625

Cisco Secure Firewall Threat Defense

A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access control policy of Cisco Firepower System Software could allow an authenticated, remote attacker to cause an affected system to stop inspecting and processing packets, resulting in a denial of service (DoS) condition. The vulnerability is due to improper SSL policy handling by the affected software when packets are passed through the sensing interfaces of an affected system. An attacker could exploit this vulnerability by sending crafted packets through a targeted system. This vulnerability affects Cisco Firepower System Software that is configured with the SSL policy feature. Cisco Bug IDs: CSCvc84361.

Exploitation status

  • A vendor advisory or patch reference has been published.

What the metrics mean

  • It is reachable over a network, without needing local access.
  • For an attacker who can reach it, no special conditions are needed to exploit it.
  • To exploit it, an ordinary user account is needed.
  • Beyond that, no action by a user is required.

Scoring

CVSS
7.1 (v3.0)
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-399
Assigned by
psirt@cisco.com

Dates

Published
2017-05-03
Last modified
2026-08-11
Sources
NVD

Affected products

  • Cisco Secure Firewall Threat Defense6.0.0, 6.0.1, 6.1.0, 6.1.0.2, 6.2.0, 6.2.1, 6.2.2

As listed in the NVD configuration data. Not a statement about your estate.

References