Umbra Wiki cve cve/CVE-2018-0297
Back to wiki

CVE-2018-0297 — NVD record

provenance: imported · CVE: CVE-2018-0297

CVE-2018-0297

NVD vulnerability record
Published 2018-05-17
Last modified 2026-08-11
Status Modified
CVSS v3.0 5.8 MEDIUM
Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CWE CWE-693

Description

A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured Secure Sockets Layer (SSL) Access Control (AC) policy to block SSL traffic. The vulnerability is due to the incorrect handling of TCP SSL packets received out of order. An attacker could exploit this vulnerability by sending a crafted SSL connection through the affected device. A successful exploit could allow the attacker to bypass a configured SSL AC policy to block SSL traffic. Cisco Bug IDs: CSCvg09316.

References

  • http://www.securityfocus.com/bid/104197
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-firepwr-pb
  • http://www.securityfocus.com/bid/104197
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-firepwr-pb

Sources

  • NVD detail: https://nvd.nist.gov/vuln/detail/CVE-2018-0297
  • NVD API 2.0: https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2018-0297

Related

concept/cve-anatomy weakness/CWE-693