CVE-2017-6625
Summary
| CVE | CVE-2017-6625 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-05-03 21:59:00 UTC |
| Updated | 2025-04-20 01:37:25 UTC |
| Description | A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access control policy of Cisco Firepower System Software could allow an authenticated, remote attacker to cause an affected system to stop inspecting and processing packets, resulting in a denial of service (DoS) condition. The vulnerability is due to improper SSL policy handling by the affected software when packets are passed through the sensing interfaces of an affected system. An attacker could exploit this vulnerability by sending crafted packets through a targeted system. This vulnerability affects Cisco Firepower System Software that is configured with the SSL policy feature. Cisco Bug IDs: CSCvc84361. |
Risk And Classification
Primary CVSS: v3.0 7.1 HIGH from [email protected]
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Problem Types: CWE-399 | NVD-CWE-noinfo | CWE-399 CWE-399
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 7.1 | HIGH | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H |
| 2.0 | [email protected] | Primary | 5.5 | AV:N/AC:L/Au:S/C:N/I:P/A:P |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
LowAvailability
HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
NoneIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:S/C:N/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Firepower Threat Defense | 6.0.0 | All | All | All |
| Application | Cisco | Firepower Threat Defense | 6.0.1 | All | All | All |
| Application | Cisco | Firepower Threat Defense | 6.1.0 | All | All | All |
| Application | Cisco | Firepower Threat Defense | 6.1.0.2 | All | All | All |
| Application | Cisco | Firepower Threat Defense | 6.2.0 | All | All | All |
| Application | Cisco | Firepower Threat Defense | 6.2.1 | All | All | All |
| Application | Cisco | Firepower Threat Defense | 6.2.2 | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Na | Cisco Firepower Threat Defense And Cisco ASA With FirePOWER Module | affected Cisco Firepower Threat Defense and Cisco ASA with FirePOWER Module | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Firepower System Software CVE-2016-6368 Denial of Service Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Cisco Firepower Threat Defense and Cisco ASA with FirePOWER Module Denial of Service Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| Cisco ASA with FirePOWER Module ACL Policy Bug Lets Remote Authenticated Users Cause the Target Service to Stop Processing Packets - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.