5.3mediumMedium

CVE-2018-0254

Cisco Secure Firewall Threat Defense

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an Intelligent Application Bypass (IAB) with a drop percentage threshold is also configured. The vulnerability is due to incorrect counting of the percentage of dropped traffic. An attacker could exploit this vulnerability by sending network traffic to a targeted device. An exploit could allow the attacker to bypass configured file action policies, and traffic that should be dropped could be allowed into the network. Cisco Bug IDs: CSCvf86435.

Exploitation status

  • A vendor advisory or patch reference has been published.

What the metrics mean

  • It is reachable over a network, without needing local access.
  • For an attacker who can reach it, no special conditions are needed to exploit it.
  • To exploit it, no account is needed.
  • Beyond that, no action by a user is required.

Scoring

CVSS
5.3 (v3.0)
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-693
Assigned by
psirt@cisco.com

Dates

Published
2018-04-19
Last modified
2026-08-11
Sources
NVD

Affected products

  • Cisco Secure Firewall Threat Defense6.1.0.5, 6.2.0.2, 6.2.1, 6.2.2
  • Cisco Amp 7150all versions
  • Cisco Amp 8150all versions
  • Cisco Firepower Appliance 7010all versions
  • Cisco Firepower Appliance 7020all versions
  • Cisco Firepower Appliance 7030all versions
  • Cisco Firepower Appliance 7050all versions
  • Cisco Firepower Appliance 7110all versions
  • Cisco Firepower Appliance 7115all versions
  • Cisco Firepower Appliance 7120all versions
  • Cisco Firepower Appliance 7125all versions
  • Cisco Firepower Appliance 8120all versions

As listed in the NVD configuration data. Not a statement about your estate.

References