cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3413
Views
5
Helpful
2
Replies

search the vulnerabilites with CVE id? within FMC/VDC

mozmorris1974
Level 1
Level 1

eg if i wanted to ensure there was protection on the following

CVE-2017-3832

how could i check to ensure that we had protection in place for it?

the old ips portal would give the CVE id

https://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=7895&signatureSubId=0&softwareVersion=6.0&releaseVersion=S976

2 Replies 2

mozmorris1974
Level 1
Level 1

ive found a way buried deep within the rule editor, is there a way within the analysis->vulnerabilities to find the CVE?

You can find them using the cli. They would be in one of the files located in /var/sf/rule-pack. Sp go into that folder and look for the CVE ID using grep.

For example:

cd /var/sf/rule-pack
grep 2017-3832 *

Review Cisco Networking products for a $25 gift card