SECUFOCUSNOW
⌕
Home›CVE index›CVE-2018-0231
Review reviewHigh

CVE-2018-0231

Cisco Adaptive Security Appliance, adaptive security appliance software, secure firewall threat defense

A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious TLS message to an interface enabled for Secure Layer Socket (SSL) services on an affected device. Messages using SSL Version 3 (SSLv3) or SSL Versi...

CVSS
8.6
EPSS
4.60%
90.8% percentile
CISA KEV
Not listed
Published
2018.04.20
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability4.60%
Technical severityCVSS 8.6

Vulnerability overview

A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious TLS message to an interface enabled for Secure Layer Socket (SSL) services on an affected device. Messages using SSL Version 3 (SSLv3) or SSL Versi...

Affected product and versions

Product
Cisco Adaptive Security Appliance, adaptive security appliance software, secure firewall threat defense
Affected versions
>= Cisco Adaptive Security Appliance, 9.8(1), 98.1(1.154), >= 6.0 < 6.1.0.6, >= 6.2.1 < 6.2.2.1
Fixed versions
6.1.0.6, 6.2.2.1

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Cisco Adaptive Security Appliance, adaptive security appliance software, secure firewall threat defense and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE
CWE-20, CWE-787