SECUFOCUSNOW
Home›CVE index›CVE-2018-0296
CISA KEV · Known exploitedHigh

CVE-2018-0296

Cisco Adaptive Security Appliance (ASA)

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on certain software releases that the ASA will not reload, but an attacker could view sensitive system information without authentication by using directory traversal techniques. The vulnerability is due to lack of proper input validation of the HTTP URL. An attacker could exploit this vulnerability by sending a crafted HTTP request to an af...

CVSS
7.5
EPSS
99.9%
100.0% percentile
CISA KEV
Listed
Published
2018.06.07
PRIORITY ASSESSMENT

Immediate review

CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.

Known exploitationConfirmed by CISA KEV
Exploit probability99.9%
Technical severityCVSS 7.5

Vulnerability overview

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on certain software releases that the ASA will not reload, but an attacker could view sensitive system information without authentication by using directory traversal techniques. The vulnerability is due to lack of proper input validation of the HTTP URL. An attacker could exploit this vulnerability by sending a crafted HTTP request to an af...

Affected product and versions

Product
Cisco Adaptive Security Appliance (ASA)
Affected versions
Cisco Adaptive Security Appliance unknown, >= 9.1 < 9.1.7.29, >= 9.2 < 9.2.4.33, >= 9.3 < 9.4.4.18, >= 9.5 < 9.6.4.8, >= 9.7 < 9.7.1.24, >= 9.8 < 9.8.2.28, >= 9.9 < 9.9.2.1, >= 6.0 < 6.1.0, >= 6.2.1 < 6.2.2.3, 6.2.3, 6.2.3-85.02, 6.2.3-851, 6.2.3.1
Fixed versions
9.1.7.29, 9.2.4.33, 9.4.4.18, 9.6.4.8, 9.7.1.24, 9.8.2.28, 9.9.2.1, 6.1.0, 6.2.2.3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
CISA required action

Apply updates per vendor instructions.

Due date: 2022.05.03
  1. 1
    Identify

    Confirm that Cisco Adaptive Security Appliance (ASA) and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
CWE-20, CWE-22
KEV added
2021.11.03
Ransomware use
미확인
CVE-2018-0296 — Cisco Adaptive Security Appliance (ASA) | SECUFOCUS NOW