High · published June 7, 2018
CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
🚨 A crafted HTTP request is all it takes to send your Cisco device into a tailspin! An attacker could exploit this vulnerability to cause a denial of service (DoS) — or even snoop around your sensitive system info without breaking a sweat! 🔥 Think of it like a restaurant's front door that doesn’t close properly. An eager diner (the attacker) can waltz in, peek behind the counter (view sensitive data), or even cause a ruckus that makes the whole place shut down for the night (DoS). If exploited, this vulnerability allows an attacker to bring your Cisco ASA crashing down — and we're talking about a complete denial of service! Alternatively, on certain software versions, they could sneakily access sensitive system information, all without needing to log in. That could mean exposing critical data or causing significant operational disruptions.
Think of it like a restaurant's front door that doesn’t close properly. An eager diner (the attacker) can waltz in, peek behind the counter (view sensitive data), or even cause a ruckus that makes the whole place shut down for the night (DoS). This vulnerability arises from insufficient input validation of the HTTP URL in the Cisco ASA web interface. An attacker can exploit this by sending a specially crafted HTTP request, leading either to a device reload or the unauthorized disclosure of sensitive information.
If exploited, this vulnerability allows an attacker to bring your Cisco ASA crashing down — and we're talking about a complete denial of service! Alternatively, on certain software versions, they could sneakily access sensitive system information, all without needing to log in. That could mean exposing critical data or causing significant operational disruptions. To protect your devices, patch your Cisco ASA and Firepower software to the latest versions immediately. Review Cisco's official advisory for specific updates and ensure you are running updated firmware across all affected products. Also, strengthen your input validation where possible. You’ve got this! Tackling this vulnerability will help keep your network secure and operational. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| cisco/adaptive_security_appliance_software | ≥ 9.1, < 9.1.7.29 | 9.1.7.29 |
| cisco/adaptive_security_appliance_software | ≥ 9.2, < 9.2.4.33 | 9.2.4.33 |
| cisco/adaptive_security_appliance_software | ≥ 9.3, < 9.4.4.18 | 9.4.4.18 |
| cisco/adaptive_security_appliance_software | ≥ 9.5, < 9.6.4.8 | 9.6.4.8 |
| cisco/adaptive_security_appliance_software | ≥ 9.7, < 9.7.1.24 | 9.7.1.24 |
| cisco/adaptive_security_appliance_software | ≥ 9.8, < 9.8.2.28 | 9.8.2.28 |
| cisco/adaptive_security_appliance_software | ≥ 9.9, < 9.9.2.1 | 9.9.2.1 |
| cisco/firepower_threat_defense | all versions | — |
| cisco/firepower_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | ≥ 6.0, < 6.1.0 | 6.1.0 |
| cisco/secure_firewall_threat_defense | ≥ 6.2.1, < 6.2.2.3 | 6.2.2.3 |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |