CVE-2018-15390 describes a denial-of-service vulnerability in Cisco Firepower Threat Defense (FTD) Software's FTP inspection engine. An unauthenticated, remote attacker can trigger a device reload by sending high-rate transit traffic when FTP inspection and an associated access control rule are configured, leading to a low-memory condition and software panic. This medium-severity vulnerability (CVSS 6.8) requires high attack complexity but has a high impact on availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.2.3.0, <= 6.2.3.4CPE matchmatch criteria | cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.