Cisco Firepower Threat Defense SSL Engine High CPU Denial of Service Vulnerability
A vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper error handling while processing SSL traffic. An attacker could exploit this vulnerability by sending a large volume of crafted SSL traffic to the vulnerable device. A successful exploit could allow the attacker to degrade the device performance by triggering a persistent high CPU utilization condition.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-0272US | medium5.9 | — | ||
A vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condi… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- FixedCisco Secure Firewall Threat Defense (FTD) Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - WorkaroundCisco Secure Firewall Threat Defense (FTD) Software
Administrators may employ one of the following workarounds: Disable URL Cloud lookups (System > Integration > Query Cisco CSI for Unknown URLs) and ensure that there is no Malware Policy with a Malware Block rule Disable SSL policy and ensure that Identity Policy does not have an active authentication rule
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan