CVE-2018-15443: falha de média gravidade em Cisco Firepower Management Center
Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.8epss 2.8%
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured Intrusion Prevention System (IPS) rule that inspects certain types of TCP traffic. The vulnerability is due to incorrect TCP retransmission handling. An attacker could exploit this vulnerability by sending a crafted TCP connection request through an affected device. A successful exploit could allow the attacker to bypass configured IPS rules and allow uninspected traffic onto the network.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Produtos afetados
Cisco · Cisco Firepower Management CenterCVEs relacionadas — Cisco Firepower Management Center
No mesmo produto, das mais perigosas para as menos.
CVE-2023-20048CRITICALCVE-2023-20048EPSS 20.9%CVE-2025-20265CRITICALCisco Secure Firewall Management Center Software Radius Remote Code Execution VulnerabilityEPSS 15.9%CVE-2019-12691MEDIUMCisco Firepower Management Center Directory Traversal VulnerabilityEPSS 5.1%CVE-2022-20743MEDIUMCisco Firepower Management Center File Upload Security Bypass VulnerabilityEPSS 4.0%CVE-2019-1642MEDIUMCisco Firepower Management Center Cross-Site Scripting VulnerabilityEPSS 3.9%CVE-2019-12690HIGHCisco Firepower Management Center Command Injection VulnerabilityEPSS 3.5%