CVE-2018-0272

A vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper error handling while processing SSL traffic. An attacker could exploit this vulnerability by sending a large volume of crafted SSL traffic to the vulnerable device. A successful exploit could allow the attacker to degrade the device performance by triggering a persistent high CPU utilization condition. Cisco Bug IDs: CSCvh89340.

• CWE-399
• CWE-755

• http://www.securityfocus.com/bid/103925Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-firepowerMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/103925Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-firepowerMitigation, Vendor Advisory

Published

Apr 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0266A vulnerability in the web framework of Cisco Unified Commun…4.3
• CVE-2018-0267A vulnerability in the web framework of Cisco Unified Commun…6.5
• CVE-2018-0268A vulnerability in the container management subsystem of Cis…
• CVE-2018-0269A vulnerability in the web framework of the Cisco Digital Ne…4.3
• CVE-2018-0270A vulnerability in the web-based management interface of Cis…
• CVE-2018-0271A vulnerability in the API gateway of the Cisco Digital Netw…
• CVE-2018-0273A vulnerability in the IPsec Manager of Cisco StarOS for Cis…
• CVE-2018-0274A vulnerability in the CLI parser of Cisco Network Services …8.8
• CVE-2018-0275A vulnerability in the support tunnel feature of Cisco Ident…
• CVE-2018-0276A vulnerability in Cisco WebEx Connect IM could allow an una…
• CVE-2018-0277A vulnerability in the Extensible Authentication Protocol-Tr…
• CVE-2018-0278A vulnerability in the management console of Cisco Firepower…6.5