CVE-2017-3887

5.9 mediumEPSS 1.3%

Medium (5.9) in cisco secure firewall threat defense. EPSS 1.3% chance of exploitation in the next 30 days.

A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco Firepower System Software prior to the first fixed release when it is configured with an SSL Decrypt-Resign policy. More Information: CSCvb62292. Known Affected Releases: 6.0.1 6.1.0 6.2.0. Known Fixed Releases: 6.2.0 6.1.0.2.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-755
Published: 2017-04-07
Modified: 2026-08-11
Record from: the NVD, synced 2026-10-19

Affected

cisco:secure_firewall_threat_defense

References

Check your stack JSON