Denial of service in Cisco Firepower Management Center

1) Denial of service

EUVDB-ID: #VU6401

Risk: Medium

CVSSv3.1: 6.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-6625

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability alows a remote authenticated attacker to cause DoS condition on the target device.

The weakness exists due to improper SSL policy handling by the affected software when packets are passed through the sensing interfaces of an affected system. An attacker can send a specially crafted packets through a targeted system and cause an affected system to stop inspecting and processing packets.

Successful exploitation of the vulnerability may result in denial of service.

Mitigation

Update to version 6.1.0.3.

Vulnerable software versions

Cisco Firepower Management Center: 6.0.0 - 6.1.0.2

External links

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ftd

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.