CVE-2018-15390
MediumCVSS 6.8Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The issue occurs when the software fails to release spinlocks under low memory conditions, if FTP inspection and an access control rule with an FTP file policy are configured. An attacker could exploit this by sending high-rate transit traffic to cause a low-memory condition.
Risk Assessment
A successful exploit could cause a software panic and device reload, leading to temporary unavailability of services and network disruption.
Recommendation
It is recommended to upgrade Cisco Firepower Threat Defense Software to a patched version and monitor device memory usage.
Original NVD description (English source)
A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software fails to release spinlocks when a device is running low on system memory, if the software is configured to apply FTP inspection and an access control rule to transit traffic, and the access control rule is associated with an FTP file policy. An attacker could exploit this vulnerability by sending a high rate of transit traffic through an affected device to cause a low-memory condition on the device. A successful exploit could allow the attacker to cause a software panic on the affected device, which could cause the device to reload and result in a temporary DoS condition.