CVE-2018-0243 — Protection Mechanism Failure in Cisco Firepower Threat Defense

CWE-693 — Protection Mechanism Failure4 documents4 sources
Severity
5.8MEDIUMNVD
EPSS
0.2%
top 54.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Firepower Threat Defense
Timeline
PublishedApr 19
Latest updateMay 13

Description

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file action policy that is intended to drop the Server Message Block Version 2 (SMB2) and SMB Version 3 (SMB3) protocols if malware is detected. The vulnerability is due to incorrect detection of an SMB2 or SMB3 file based on the total file length. An attacker could exploit this vulnerability by sending a crafted SMB2 or SMB3 transfer request through t…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-522c-wx8c-28p2: A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file↗2022-05-13
▶
CVEList
CVE-2018-0243: A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured file↗2018-04-19
▶

📋Vendor Advisories

1
Cisco
Cisco Firepower System Software Server Message Block File Policy Bypass Vulnerability↗2018-04-18
▶
CVE-2018-0243 — Protection Mechanism Failure in Cisco | cvebase