Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
High CVSS 7.5 Listed in CISA KEV
Summary
Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an attacker to cause a denial-of-service (DoS) condition or information disclosure.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Cisco:Adaptive Security Appliance (ASA)
- :
- :
Sources
- CISA KEV DATABASE
- NVD DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2018-0296 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- http://packetstormsecurity.com/files/154017/Cisco-Adaptive-Security-Appliance-Path-Traversal.html Exploit
- http://www.securityfocus.com/bid/104612 Third Party Advisory
- http://www.securitytracker.com/id/1041076 Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-184-01 Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-asaftd Vendor Advisory
- https://www.exploit-db.com/exploits/44956/ Exploit
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0296 US Government Resource
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV
- nvd_ingest NVD