Read the docs
TI-2018-00231 Aliases CVE-2018-0272GHSA-gg84-j6g5-hr53

Resource management flaw in Cisco Firepower Threat Defense

Priority LOW 29CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

A vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper error handling while processing SSL traffic. An attacker could exploit this vulnerability by sending a large volume of crafted SSL traffic to the vulnerable device. A successful exploit could allow the attacker to degrade the device performance by triggering a persistent high CPU utilization condition. Cisco Bug IDs: CSCvh89340.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01264 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco Firepower Threat DefenseCisco Firepower Threat Defense—No fix listedCNA
  • Cisco Firepower Threat Defense Vendor— Affected Cisco Firepower Threat Defense Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:cisco:firepower:6.2.1:*:*:*:*:*:*:*6.2.1VulnerableCisco
cpe:2.3:a:cisco:firepower:6.2.2.1:*:*:*:*:*:*:*6.2.2.1VulnerableCisco
  • cpe:2.3:a:cisco:firepower:6.2.1:*:*:*:*:*:*:* Versions 6.2.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:firepower:6.2.2.1:*:*:*:*:*:*:* Versions 6.2.2.1 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-0272
  2. 2026-10-03 Alias added: GHSA-gg84-j6g5-hr53

References

Advisory 1

  • TI-2019-09492 Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities CVSS 3.1HIGH 7.5
  • TI-2019-09491 Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities CVSS 3.1HIGH 7.5
  • TI-2015-05294 Cisco FirePOWER (formerly Sourcefire) 7000 and 8000 devices with software 5.4.0.1 allow… CVSS 2.0MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences