Medium severity · published Jul 16, 2018
CVE-2018-0384
A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control policy that is…
5.8
CVSS
2.5%
EPSS
No
On KEV
Description
A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control policy that is configured to block traffic for an affected system. The vulnerability exists because the affected software incorrectly handles TCP packets that are received out of order when a TCP SYN retransmission is issued. An attacker could exploit this vulnerability by sending a maliciously crafted connection through an affected device. A successful exploit could allow the attacker to bypass a URL-based access control policy that is configured to block traffic for the affected system. Cisco Bug IDs: CSCvh84511.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
Secure Firewall Management Center · Cisco
6.0.0; 6.1.0; 6.2.0; 6.2.1; 6.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-0384
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-0384
Third Party Advisory
http://www.securityfocus.com/bid/104725
Third Party Advisory
http://www.securitytracker.com/id/1041284
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180711-firesight-url-bypass
More from Secure Firewall Management Center
10.0
CVE-2026-20131
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
10.0
CVE-2026-20079
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
5.3
CVE-2026-20316
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
10.0
CVE-2025-20265
Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability
9.9
CVE-2024-20424
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an…