5.3mediumMedium
CVE-2018-0254
Cisco Secure Firewall Threat Defense
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an Intelligent Application Bypass (IAB) with a drop percentage threshold is also configured. The vulnerability is due to incorrect counting of the percentage of dropped traffic. An attacker could exploit this vulnerability by sending network traffic to a targeted device. An exploit could allow the attacker to bypass configured file action policies, and traffic that should be dropped could be allowed into the network. Cisco Bug IDs: CSCvf86435.
Exploitation status
- A vendor advisory or patch reference has been published.
What the metrics mean
- It is reachable over a network, without needing local access.
- For an attacker who can reach it, no special conditions are needed to exploit it.
- To exploit it, no account is needed.
- Beyond that, no action by a user is required.
Scoring
- CVSS
- 5.3 (v3.0)
- Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N- Weakness
- CWE-693
- Assigned by
- psirt@cisco.com
Dates
- Published
- 2018-04-19
- Last modified
- 2026-08-11
- Sources
- NVD
Affected products
- Cisco Secure Firewall Threat Defense6.1.0.5, 6.2.0.2, 6.2.1, 6.2.2
- Cisco Amp 7150all versions
- Cisco Amp 8150all versions
- Cisco Firepower Appliance 7010all versions
- Cisco Firepower Appliance 7020all versions
- Cisco Firepower Appliance 7030all versions
- Cisco Firepower Appliance 7050all versions
- Cisco Firepower Appliance 7110all versions
- Cisco Firepower Appliance 7115all versions
- Cisco Firepower Appliance 7120all versions
- Cisco Firepower Appliance 7125all versions
- Cisco Firepower Appliance 8120all versions
As listed in the NVD configuration data. Not a statement about your estate.