---
id: CVE-2017-3887
title: >-
  A vulnerability in the detection engine that handles Secure Sockets Layer
  (SSL) packets for Cisco Firepower System Software could allow an
  unauthenticated, remote attacker to cause a denial of service (DoS) condition
  because the Snort pr…
summary: >-
  A vulnerability in the detection engine that handles Secure Sockets Layer
  (SSL) packets for Cisco Firepower System Software could allow an
  unauthenticated, remote attacker to cause a denial of service (DoS) condition
  because the Snort pr…
severity: medium
cvss: 5.9
cvssVector: 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-755
vendor: cisco
product: secure_firewall_threat_defense
affected:
  - secure_firewall_threat_defense = 6.0.1
  - secure_firewall_threat_defense = 6.1.0
  - secure_firewall_threat_defense = 6.2.0
published: '2017-04-07'
updated: '2026-08-11'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2017-3887'
references:
  - url: 'http://www.securityfocus.com/bid/97453'
    label: psirt@cisco.com
  - url: >-
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cfpw1
    label: psirt@cisco.com
  - url: 'http://www.securityfocus.com/bid/97453'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cfpw1
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.01292
epssPercentile: 0.68504
ingestedAt: '2026-08-11T19:48:25.300Z'
---

## Overview

A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco Firepower System Software prior to the first fixed release when it is configured with an SSL Decrypt-Resign policy. More Information: CSCvb62292. Known Affected Releases: 6.0.1 6.1.0 6.2.0. Known Fixed Releases: 6.2.0 6.1.0.2.

## Affected

- `secure_firewall_threat_defense = 6.0.1`
- `secure_firewall_threat_defense = 6.1.0`
- `secure_firewall_threat_defense = 6.2.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.