Sign-up

ID

VAR-201810-0329


CVE

CVE-2018-0455


TITLE

Cisco Firepower System Data processing vulnerability in software

Trust: 0.8

sources: JVNDB: JVNDB-2018-013352

DESCRIPTION

A vulnerability in the Server Message Block Version 2 (SMBv2) and Version 3 (SMBv3) protocol implementation for the Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the device to run low on system memory, possibly preventing the device from forwarding traffic. It is also possible that a manual reload of the device may be required to clear the condition. The vulnerability is due to incorrect SMB header validation. An attacker could exploit this vulnerability by sending a custom SMB file transfer through the targeted device. A successful exploit could cause the device to consume an excessive amount of system memory and prevent the SNORT process from forwarding network traffic. This vulnerability can be exploited using either IPv4 or IPv6 in combination with SMBv2 or SMBv3 network traffic. Cisco Firepower System The software contains data processing vulnerabilities.Service operation interruption (DoS) There is a possibility of being put into a state. Cisco Adaptive Security Appliance (ASA) 5500-X Series with FirePOWER Services, etc. are all security devices of Cisco (Cisco). Firepower System Software is a firewall operating system used in it. The following products are affected: Cisco Adaptive Security Appliance (ASA) 5500-X Series with FirePOWER Services; Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls; Advanced Malware Protection (AMP) for Networks, 7000 Series Appliances; Advanced Malware Protection (AMP) for Networks,

Trust: 1.71

sources: NVD: CVE-2018-0455 // JVNDB: JVNDB-2018-013352 // VULHUB: VHN-118657

AFFECTED PRODUCTS

vendor:ciscomodel:firepower system softwarescope:eqversion:6.0

Trust: 1.6

vendor:ciscomodel:firepower system softwarescope:eqversion:6.1.0

Trust: 1.6

vendor:ciscomodel:firepower system softwarescope:eqversion:6.2.1

Trust: 1.6

vendor:ciscomodel:firepower system softwarescope:eqversion:6.2.2

Trust: 1.6

vendor:ciscomodel:firepower system softwarescope:eqversion:6.2.0.2

Trust: 1.6

vendor:ciscomodel:firepower system softwarescope:eqversion:6.2.3

Trust: 1.6

vendor:ciscomodel:firepower system softwarescope:eqversion:6.0.1

Trust: 1.6

vendor:ciscomodel:firepower system softwarescope:eqversion:6.2.0

Trust: 1.6

vendor:ciscomodel:firepower system softwarescope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2018-013352 // CNNVD: CNNVD-201810-177 // NVD: CVE-2018-0455

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-0455
value: HIGH

Trust: 1.0

NVD: CVE-2018-0455
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201810-177
value: HIGH

Trust: 0.6

VULHUB: VHN-118657
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2018-0455
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-118657
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2018-0455
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-118657 // JVNDB: JVNDB-2018-013352 // CNNVD: CNNVD-201810-177 // NVD: CVE-2018-0455

PROBLEMTYPE DATA

problemtype:CWE-19

Trust: 1.8

problemtype:NVD-CWE-noinfo

Trust: 1.0

sources: JVNDB: JVNDB-2018-013352 // NVD: CVE-2018-0455

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201810-177

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201810-177

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-013352

PATCH
title:cisco-sa-20181003-fp-smb-snorturl:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-fp-smb-snort
Trust: 0.8
title:Cisco Firepower System Software Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=85391
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2018-013352 // 
            
            
            
            CNNVD: CNNVD-201810-177

EXTERNAL IDS
db:NVDid:CVE-2018-0455
Trust: 2.5
db:JVNDBid:JVNDB-2018-013352
Trust: 0.8
db:CNNVDid:CNNVD-201810-177
Trust: 0.7
db:VULHUBid:VHN-118657
Trust: 0.1
sources:
            
            
            VULHUB: VHN-118657 // 
            
            
            
            JVNDB: JVNDB-2018-013352 // 
            
            
            
            CNNVD: CNNVD-201810-177 // 
            
            
            
            NVD: CVE-2018-0455

REFERENCES
url:https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20181003-fp-smb-snort
Trust: 1.7
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-0455
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-0455
Trust: 0.8
sources:
            
            
            VULHUB: VHN-118657 // 
            
            
            
            JVNDB: JVNDB-2018-013352 // 
            
            
            
            CNNVD: CNNVD-201810-177 // 
            
            
            
            NVD: CVE-2018-0455

SOURCES
db:VULHUBid:VHN-118657
db:JVNDBid:JVNDB-2018-013352
db:CNNVDid:CNNVD-201810-177
db:NVDid:CVE-2018-0455

LAST UPDATE DATE
2024-11-23T22:12:19.615000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-118657date:2019-10-09T00:00:00
db:JVNDBid:JVNDB-2018-013352date:2019-02-19T00:00:00
db:CNNVDid:CNNVD-201810-177date:2019-10-17T00:00:00
db:NVDid:CVE-2018-0455date:2024-11-21T03:38:16.027

SOURCES RELEASE DATE
db:VULHUBid:VHN-118657date:2018-10-05T00:00:00
db:JVNDBid:JVNDB-2018-013352date:2019-02-19T00:00:00
db:CNNVDid:CNNVD-201810-177date:2018-10-08T00:00:00
db:NVDid:CVE-2018-0455date:2018-10-05T14:29:03.560