PT-2018-8725 · Cisco · Cisco Firepower System

CVE-2018-0283

·

Publicado

2018-05-02

·

Atualizado

2024-11-26

CVSS v3.1

5.8

Média

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software (affected versions not specified)
Description: A flaw in the detection engine could allow an unauthenticated, remote attacker to restart the Snort detection engine, resulting in a brief denial of service (DoS) condition. This issue is due to the incorrect handling of Transport Layer Security (TLS) TCP connection setup. An attacker could exploit this by sending crafted TLS traffic. A successful exploit could cause the Snort detection engine to restart, resulting in a DoS condition.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2018-0283

Produtos afetados

Cisco Firepower System