THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2018-0254 (MEDIUM 5.3) — A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an Intelligent Application Bypass (IAB) with a drop percentage threshold is also configured. The vulnerability i

[NVD] CVE-2018-0254 (MEDIUM 5.3) — A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an Intelligent Application Bypass (IAB) with a drop percentage threshold is also configured. The vulnerability i

lownvdPublished 2018-04-19

CVE-2018-0254 CVSS: 5.3 MEDIUM Published: 2018-04-19T20:29:01.127

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an Intelligent Application Bypass (IAB) with a drop percentage threshold is also configured. The vulnerability is due to incorrect counting of the percentage of drop

Indicators of compromise

CVE-2018-0254cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2018-0254