CVE-2018-0244

CVE-2018-0244 describes a vulnerability in Cisco Firepower System Software's detection engine, affecting versions prior to 6.2.3. This flaw allows an unauthenticated, remote attacker to bypass configured file action policies designed to drop malicious Server Message Block (SMB) files. The vulnerability arises from how the SMB protocol handles failed large file transfers, enabling an attacker to pass malware through the device. Rated with a CVSS score of 5.8 (Medium), the vulnerability has a network attack vector and low attack complexity, requiring no user interaction. The potential impact is a bypass of security controls, leading to a loss of integrity as malicious files can reach endpoints. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, consistent with the majority of reported vulnerabilities.