Vulnerability Details : CVE-2017-6632
A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of system resources. The vulnerability is due to the logging of certain TCP packets by the affected software. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to cause a DoS condition. The success of an exploit is dependent on how an administrator has configured logging for SSL policies for a device. This vulnerability affects Cisco FirePOWER System Software that is configured to log connections by using SSL policy default actions. Cisco Bug IDs: CSCvd07072.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2017-6632
Probability of exploitation activity in the next 30 days: 0.13%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 47 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2017-6632
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST |
|
7.5
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2017-6632
-
Assigned by: ykramarz@cisco.com (Secondary)
-
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-6632
-
http://www.securityfocus.com/bid/98523
Cisco Firepower System Software CVE-2017-6632 Denial of Service VulnerabilityThird Party Advisory;VDB Entry
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-fpwr
Cisco FirePOWER System Software SSL Logging Denial of Service VulnerabilityVendor Advisory
Products affected by CVE-2017-6632
- cpe:2.3:a:cisco:firepower_threat_defense:6.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:5.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:6.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:6.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:6.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:6.0.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:6.2_base:*:*:*:*:*:*:*