Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability

A vulnerability in the detection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access control policies. The vulnerability is due to improper validation of ICMP packets. An attacker could exploit this vulnerability by sending crafted ICMP packets to the affected device. A successful exploit could allow the attacker to bypass configured access control policies.

N/A

保护机制失效

Cisco Firepower Threat Defense 安全漏洞

Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。 Cisco FTD中的检测引擎存在安全漏洞，该漏洞源于程序没有正确验证ICMP数据包。远程攻击者可通过发送特制的ICMP数据包利用该漏洞绕过被配置的访问控制策略。以下产品及版本受到影响：Cisco Firepower Threat Defense 6.2.0版本，6.2.0.5版本，6.2.3版本，6.2.3.1版本，6.2.3.2版本，6.4.0版本。

N/A

N/A