cisco firepower system software vulnerabilities

Latest cisco firepower system software CVEs

Newest publication first

1. CVE-2018-15443 Cisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability

   Published 2018-11-08

   High·CVSS 7.5 EPSS 2.8%

   A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured Intrusion Prevention System (IPS) rule that inspects certain types of TCP traffic. The vulnerability is due to incorrect TCP retransmi...

2. CVE-2018-0455 Cisco Firepower System Software Detection Engine Denial of Service Vulnerability

   Published 2018-10-05

   High·CVSS 7.5 EPSS 1.5%

   A vulnerability in the Server Message Block Version 2 (SMBv2) and Version 3 (SMBv3) protocol implementation for the Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the device to run low on system memory, possibly preventing the device from...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.