Cisco Firepower System Software vulnerabilities

2 CVEs affecting Cisco Firepower System Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-15443, published 2018-11-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-15443, published 2018-11-08. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured Intrusion Prevention System (IPS) rule that inspects…
CVE-2018-0455, published 2018-10-05. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the Server Message Block Version 2 (SMBv2) and Version 3 (SMBv3) protocol implementation for the Cisco Firepower System Software could allow an unauthenticated, remote attacker to…