Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6h59-64rj-g8fp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by sending crafted ICMP packets to the affected device. A successful exploit could allow the attacker to bypass configured access control policies.

A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by sending crafted ICMP packets to the affected device. A successful exploit could allow the attacker to bypass configured access control policies.

EPSS

Процентиль: 30%
0.00115
Низкий

7.5 High

CVSS3

Дефекты

CWE-693

Связанные уязвимости

CVSS3: 5.8
nvd
больше 6 лет назад

A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by sending crafted ICMP packets to the affected device. A successful exploit could allow the attacker to bypass configured access control policies.

CVSS3: 5.8
fstec
больше 6 лет назад

Уязвимость программного обеспечения администрирования сети Cisco Firepower Management Center, связанная с ошибками проверки ICMP-пакетов, позволяющая нарушителю обойти существующие политики разграничения доступа

EPSS

Процентиль: 30%
0.00115
Низкий

7.5 High

CVSS3

Дефекты

CWE-693