Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability

Vulnerability

The vulnerability resides in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software. It is due to improper reassembly of traffic streams. Affected versions include all releases of these products at the time of publication [1].

Exploitation

An unauthenticated, remote attacker can exploit this vulnerability by sending crafted streams through an affected device. No authentication or special network position is required beyond network access to the device [1].

Impact

Successful exploitation allows the attacker to bypass filtering protections and deliver malicious requests to protected systems that would otherwise be blocked. This could lead to further compromise of protected systems [1].

Mitigation

Cisco has released software updates to address this vulnerability. Customers should upgrade to fixed versions as indicated in the Cisco Security Advisory. No workarounds are available [1].