Resource exhaustion in Cisco Firepower Threat Defense
CVE-2017-6632
A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of system resources. The vulnerability is due to the logging of certain TCP packets by the affected software. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to cause a DoS condition. The success of an exploit is dependent on how an administrator has configured logging for SSL policies for a device. This vulnerability affects Cisco FirePOWER System Software that is configured to log connections by using SSL policy default actions. Cisco Bug IDs: CSCvd07072.
EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Cisco Firepower_threat_defense — versions 5.3.0, 5.4.0, 6.0.0
- Cisco Secure_firewall_threat_defense — versions 5.3.0, 5.4.0, 6.0.0
- N/a Cisco Firepower System Software — versions Cisco FirePOWER System Software
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2017-6632?
- CVE-2017-6632 is a high-severity vulnerability in Cisco Firepower Threat Defense, classified under CWE-399. CVSS score: 7.5/10. Published 2017-05-22.
- How severe is CVE-2017-6632?
- High severity. CVSS v3 base score is 7.5 out of 10.