8.6highHigh
CVE-2018-15462
Cisco Secure Firewall Threat Defense
A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an increase in CPU and memory usage, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient ingress TCP rate limiting for TCP ports 22 (SSH) and 443 (HTTPS). An attacker could exploit this vulnerability by sending a crafted, steady stream of TCP traffic to port 22 or 443 on the data interfaces that are configured with management access to the affected device.
Exploitation status
- A vendor advisory or patch reference has been published.
What the metrics mean
- It is reachable over a network, without needing local access.
- For an attacker who can reach it, no special conditions are needed to exploit it.
- To exploit it, no account is needed.
- Beyond that, no action by a user is required.
Scoring
- CVSS
- 8.6 (v3.0)
- Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H- Weakness
- CWE-399
- Assigned by
- psirt@cisco.com
Dates
- Published
- 2019-05-03
- Last modified
- 2026-08-11
- Sources
- NVD
Affected products
- Cisco Secure Firewall Threat Defense- 6.2.3.12, 6.3.0 - 6.3.0.3
As listed in the NVD configuration data. Not a statement about your estate.