CVE-2018-0296KEV · OVERDUECWE-20CWE-22path-traversal

Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

High · published June 7, 2018

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.

1633
days past CISA
deadline
CVSS v3.1
7.5
EPSS
100%
Percentile
100.0
In the wild
Confirmed
What it is

🚨 A crafted HTTP request is all it takes to send your Cisco device into a tailspin! An attacker could exploit this vulnerability to cause a denial of service (DoS) — or even snoop around your sensitive system info without breaking a sweat! 🔥 Think of it like a restaurant's front door that doesn’t close properly. An eager diner (the attacker) can waltz in, peek behind the counter (view sensitive data), or even cause a ruckus that makes the whole place shut down for the night (DoS). If exploited, this vulnerability allows an attacker to bring your Cisco ASA crashing down — and we're talking about a complete denial of service! Alternatively, on certain software versions, they could sneakily access sensitive system information, all without needing to log in. That could mean exposing critical data or causing significant operational disruptions.

Put simply

Think of it like a restaurant's front door that doesn’t close properly. An eager diner (the attacker) can waltz in, peek behind the counter (view sensitive data), or even cause a ruckus that makes the whole place shut down for the night (DoS). This vulnerability arises from insufficient input validation of the HTTP URL in the Cisco ASA web interface. An attacker can exploit this by sending a specially crafted HTTP request, leading either to a device reload or the unauthorized disclosure of sensitive information.

What to do

If exploited, this vulnerability allows an attacker to bring your Cisco ASA crashing down — and we're talking about a complete denial of service! Alternatively, on certain software versions, they could sneakily access sensitive system information, all without needing to log in. That could mean exposing critical data or causing significant operational disruptions. To protect your devices, patch your Cisco ASA and Firepower software to the latest versions immediately. Review Cisco's official advisory for specific updates and ensure you are running updated firmware across all affected products. Also, strengthen your input validation where possible. You’ve got this! Tackling this vulnerability will help keep your network secure and operational. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.99908 · 100.0th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2018-06-07T16:29Z
KEV added
2021-11-03 · due 2022-05-03
Affected products (13)
ProductVersionsFixed in
cisco/adaptive_security_appliance_software≥ 9.1, < 9.1.7.299.1.7.29
cisco/adaptive_security_appliance_software≥ 9.2, < 9.2.4.339.2.4.33
cisco/adaptive_security_appliance_software≥ 9.3, < 9.4.4.189.4.4.18
cisco/adaptive_security_appliance_software≥ 9.5, < 9.6.4.89.6.4.8
cisco/adaptive_security_appliance_software≥ 9.7, < 9.7.1.249.7.1.24
cisco/adaptive_security_appliance_software≥ 9.8, < 9.8.2.289.8.2.28
cisco/adaptive_security_appliance_software≥ 9.9, < 9.9.2.19.9.2.1
cisco/firepower_threat_defenseall versions—
cisco/firepower_threat_defenseall versions—
cisco/secure_firewall_threat_defense≥ 6.0, < 6.1.06.1.0
cisco/secure_firewall_threat_defense≥ 6.2.1, < 6.2.2.36.2.2.3
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
References (13)
EPSS history
Timeline
  • 03 NOV 00:00Z
    Added to CISA KEV — remediate by May 3
    kev
  • 07 JUN 12:00Z
    A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device…
    cvelistv5