Read the docs
TI-2017-04391 Aliases CVE-2017-6632GHSA-4rxc-c47v-3rf5

Resource management flaw in Cisco FirePOWER System Software

Priority LOW 37CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of system resources. The vulnerability is due to the logging of certain TCP packets by the affected software. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to cause a DoS condition. The success of an exploit is dependent on how an administrator has configured logging for SSL policies for a device. This vulnerability affects Cisco FirePOWER System Software that is configured to log connections by using SSL policy default actions. Cisco Bug IDs: CSCvd07072.

Why it matters now

EPSS 0.02414 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco FirePOWER System SoftwareCisco FirePOWER System Software—No fix listedCNA
  • Cisco FirePOWER System Software Vendor— Affected Cisco FirePOWER System Software Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:cisco:firepower_threat_defense:6.2_base:*:*:*:*:*:*:*6.2_baseVulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:5.3.0:*:*:*:*:*:*:*5.3.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:5.4.0:*:*:*:*:*:*:*5.4.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.0:*:*:*:*:*:*:*6.0.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1:*:*:*:*:*:*:*6.0.1VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1.3:*:*:*:*:*:*:*6.0.1.3VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0:*:*:*:*:*:*:*6.1.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0.2:*:*:*:*:*:*:*6.1.0.2VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0:*:*:*:*:*:*:*6.2.0VulnerableCisco
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.1:*:*:*:*:*:*:*6.2.1VulnerableCisco
  • cpe:2.3:a:cisco:firepower_threat_defense:6.2_base:*:*:*:*:*:*:* Versions 6.2_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:5.3.0:*:*:*:*:*:*:* Versions 5.3.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:5.4.0:*:*:*:*:*:*:* Versions 5.4.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.0:*:*:*:*:*:*:* Versions 6.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1.3:*:*:*:*:*:*:* Versions 6.0.1.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0:*:*:*:*:*:*:* Versions 6.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0.2:*:*:*:*:*:*:* Versions 6.1.0.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0:*:*:*:*:*:*:* Versions 6.2.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.1:*:*:*:*:*:*:* Versions 6.2.1 Vulnerable ·Cisco
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.2:*:*:*:*:*:*:*6.2.2VulnerableCisco
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.2:*:*:*:*:*:*:* Versions 6.2.2 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6632
  2. 2026-10-03 Alias added: GHSA-4rxc-c47v-3rf5

References

Advisory 1

  • TI-2018-00255 Improper input validation in Cisco Adaptive Security Appliance unknown KEVCVSS 3.1HIGH 7.5
  • TI-2018-10945 Cisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability CVSS 3.1HIGH 7.5
  • TI-2020-03119 Incorrect authorization in Cisco Adaptive Security Appliance Software CVSS 3.1MEDIUM 6.5
  • TI-2020-03125 Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability CVSS 3.1MEDIUM 5.3
  • TI-2020-03004 Cisco FXOS Software Command Injection Vulnerability CVSS 3.1MEDIUM 6.7
  • TI-2020-03123 Cross-site scripting in Cisco Adaptive Security Appliance Software CVSS 3.1MEDIUM 6.1
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences