CVE-2018-15458— Cisco Firepower Management Center Disk Utilization Denial of Service Vulnerability

Cisco Firepower Management Center Disk Utilization Denial of Service Vulnerability

A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction with remote authentication, could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because the configuration of the Shell Access Filter, when used with a specific type of remote authentication, can cause a system file to have unbounded writes. An attacker could exploit this vulnerability by sending a steady stream of remote authentication requests to the appliance when the specific configuration is applied. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the device functions could operate abnormally, making the device unstable.

N/A

资源管理错误

Cisco Firepower Management Center 资源管理错误漏洞

Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。 Cisco FMC中的Shell Access Filter功能存在资源管理错误漏洞。远程攻击者可通过发送一系列的远程身份验证请求利用该漏洞造成拒绝服务。

N/A

N/A