CVE-2018-0233
Quick assessment
Affected
n/a Cisco Firepower Detection Engine
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services等都是美国思科（Cisco）公司的安全防火墙设备。Firepower System Software是其中的一套防火墙操作系统。detection engine是其中的一个入侵检测引擎。 多款Cisco产品中的Firepower System Software 6.0.0及之后的版本中detection引擎的安全套接层协议数据包重组功
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-0233
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the detection engine to consume excessive system memory on an affected device, which could cause a denial of service (DoS) condition. The vulnerability is due to the affected software improperly handling changes to SSL connection states. An attacker could exploit this vulnerability by sending crafted SSL connections through an affected device. A successful exploit could allow the attacker to cause the detection engine to consume excessive system memory on the affected device, which could cause a DoS condition. The device may need to be reloaded manually to recover from this condition. This vulnerability affects Cisco Firepower System Software Releases 6.0.0 and later, running on any of the following Cisco products: Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services, Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls, Advanced Malware Protection (AMP) for Networks, 7000 Series Appliances, Advanced Malware Protection (AMP) for Networks, 8000 Series Appliances, Firepower 4100 Series Appliances, FirePOWER 7000 Series Appliances, FirePOWER 8000 Series Appliances, Firepower 9300 Series Security Appliances, Firepower Threat Defense for Integrated Services Routers (ISRs), Firepower Threat Defense Virtual for VMware, Industrial Security Appliance 3000, Sourcefire 3D System Appliances. Cisco Bug IDs: CSCve23031.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Vulnerability Title
多款Cisco产品Firepower System Software detection引擎安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services等都是美国思科（Cisco）公司的安全防火墙设备。Firepower System Software是其中的一套防火墙操作系统。detection engine是其中的一个入侵检测引擎。 多款Cisco产品中的Firepower System Software 6.0.0及之后的版本中detection引擎的安全套接层协议数据包重组功
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Cisco Firepower Detection Engine | Cisco Firepower Detection Engine | - |
|
II. Public POCs for CVE-2018-0233
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-0233
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-0233 (2)
Same Patch Batch · n/a · 2018-04-19 · 48 CVEs total
| CVE-2017-18261 | Linux kernel 安全漏洞 | |
| CVE-2018-10220 | Glastopf 安全漏洞 | |
| CVE-2018-10222 | idreamsoft iCMS 跨站请求伪造漏洞 | |
| CVE-2018-10227 | MiniCMS 跨站脚本漏洞 | |
| CVE-2018-9137 | Open-AudIT 安全漏洞 | |
| CVE-2018-2783 | 多款 Oracle 产品访问控制错误漏洞 | |
| CVE-2018-2831 | Oracle Virtualization VM VirtualBox组件安全漏洞 | |
| CVE-2018-2856 | Oracle Financial Services Applications Financial Services Basel Regulatory Capital Interna | |
| CVE-2018-10225 | thinkphp SQL注入漏洞 | |
| CVE-2018-10205 | hyperstart 安全漏洞 | |
| CVE-2018-10219 | baijiacms 安全漏洞 | |
| CVE-2018-10188 | phpMyAdmin 跨站请求伪造漏洞 | |
| CVE-2018-10230 | Zend Server Zend Debugger 跨站脚本漏洞 | |
| CVE-2018-9861 | Drupal CKEditor Enhanced Image插件跨站脚本漏洞 | |
| CVE-2018-10236 | POSCMS 安全漏洞 | |
| CVE-2018-10235 | POSCMS 安全漏洞 | |
| CVE-2018-0276 | Cisco WebEx Connect IM 跨站脚本漏洞 | |
| CVE-2018-0275 | Cisco Identity Services Engine 配置错误漏洞 | |
| CVE-2018-0273 | Cisco Aggregation Services Router 5000 Series Routers和Virtualized Packet Core System Softw | |
| CVE-2018-0272 | Cisco Firepower System Software Secure Sockets Layer引擎资源管理错误漏洞 |
Showing top 20 of 48 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco Firepower Detection Engine
Same vendor: n/a
-
CVE-2026-90687
GPAC MP4Box base_scenegraph.c gf_node_changed_internal use a -
CVE-2026-90686
GPAC MP4Box loader_bt.c gf_bt_report memory corruption -
CVE-2026-90685
GPAC MP4Box lsr_dec.c lsr_exec_command_list assertion -
CVE-2026-90684
GPAC MP4Box base_scenegraph.c gf_node_get_field_count assert -
CVE-2026-90683
GPAC MP4Box base_scenegraph.c gf_node_unregister assertion
Same weakness: CWE-400
-
CVE-2026-90582
evanchiu serverless-todo API Todo Endpoint index.js saveTodo -
CVE-2026-90554
vLLM before 0.28.0 Denial of Service via audio extraction -
CVE-2026-50018
Hoverfly: Denial of Service via Goroutine Leak in Remote Pos -
CVE-2026-54135
AirSane has a Remote Denial of Service (OOM) via Unvalidated -
CVE-2026-68497
jackson-databind: unbounded numeric parse in Duration and XM
V. Comments for CVE-2018-0233
No comments yet