High severity · published Jul 16, 2018
CVE-2018-0383
A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the…
8.6
CVSS
3%
EPSS
No
On KEV
Description
A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the transfer of files to an affected system via FTP. The vulnerability exists because the affected software incorrectly handles FTP control connections. An attacker could exploit this vulnerability by sending a maliciously crafted FTP connection to transfer a file to an affected device. A successful exploit could allow the attacker to bypass a file policy that is configured to apply the Block upload with reset action to FTP traffic. Cisco Bug IDs: CSCvh70130.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
Secure Firewall Management Center · Cisco
6.2.2.1; 6.2.3; 6.3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-0383
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-0383
Third Party Advisory
http://www.securityfocus.com/bid/104726
Third Party Advisory
http://www.securitytracker.com/id/1041283
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-firesight-file-bypass
More from Secure Firewall Management Center
10.0
CVE-2026-20131
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
10.0
CVE-2026-20079
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
5.3
CVE-2026-20316
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
10.0
CVE-2025-20265
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject…
9.9
CVE-2024-20424
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an…