CVE-2018-0383

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software (affected versions not specified)

Description A vulnerability exists in the detection engine of the software, allowing an unauthenticated, remote attacker to bypass a file policy configured to block file transfers via FTP. This occurs because the software incorrectly handles FTP control connections. An attacker could exploit this by sending a maliciously crafted FTP connection to transfer a file, potentially bypassing a file policy that applies the Block upload with reset action to FTP traffic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.