CVE-2018-0254

N/A

Published: April 19, 2018 at 08:00 PM UTC

Updated: August 11, 2026 at 07:33 PM UTC

32 products affected across 1 vendorSecure Firewall Threat DefenseFirepower Management Center 2500Firepower Management Center 1000

Using Cisco Firepower System Software by N/A?

Get instant alerts when new vulnerabilities affect Cisco Firepower System Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 1%

SSVC

No known exploit

Description

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an Intelligent Application Bypass (IAB) with a drop percentage threshold is also configured. The vulnerability is due to incorrect counting of the percentage of dropped traffic. An attacker could exploit this vulnerability by sending network traffic to a targeted device. An exploit could allow the attacker to bypass configured file action policies, and traffic that should be dropped could be allowed into the network. Cisco Bug IDs: CSCvf86435.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Secure Firewall Threat Defense · Cisco

95%

6.1.0.5 6.2.0.2 6.2.1 6.2.2

cisco-amp-7150 (environment) · cisco-amp-8150 (environment) · cisco-firepower-appliance-7010 (environment) · cisco-firepower-appliance-7020 (environment) · cisco-firepower-appliance-7030 (environment) · cisco-firepower-appliance-7050 (environment) · cisco-firepower-appliance-7110 (environment) · cisco-firepower-appliance-7115 (environment) · cisco-firepower-appliance-7120 (environment) · cisco-firepower-appliance-7125 (environment) · cisco-firepower-appliance-8120 (environment) · cisco-firepower-appliance-8130 (environment) · cisco-firepower-appliance-8140 (environment) · cisco-firepower-appliance-8250 (environment) · cisco-firepower-appliance-8260 (environment) · cisco-firepower-appliance-8270 (environment) · cisco-firepower-appliance-8290 (environment) · cisco-firepower-appliance-8350 (environment) · cisco-firepower-appliance-8360 (environment) · cisco-firepower-appliance-8370 (environment) · cisco-firepower-appliance-8390 (environment) · cisco-firepower-management-center-1000 (environment) · cisco-firepower-management-center-2000 (environment) · cisco-firepower-management-center-2500 (environment) · cisco-firepower-management-center-4000 (environment) · cisco-firepower-management-center-4500 (environment) · cisco-firesight-management-center-1500 (environment) · cisco-firesight-management-center-3500 (environment) · cisco-firesight-management-center-750 (environment) · cisco-ngips-virtual-appliance (environment)

Firesight System · Cisco

60%

All versions

Amp 7150 · Ciscodevice

80%

All versions

Amp 8150 · Ciscodevice

80%

All versions

Firepower Appliance 7010 · Ciscodevice

80%

All versions