Denial of service in Cisco Adaptive Security Appliance Web Services
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2018-0296 |
| CWE-ID | CWE-23 |
| Exploitation vector | Network |
| Public exploit | Vulnerability #1 is being exploited in the wild. |
| Vulnerable software |
3000 Series Industrial Security Appliance (ISA) Server applications / IDS/IPS systems, Firewalls and proxy servers Firepower 2100 Series Security Appliance Server applications / IDS/IPS systems, Firewalls and proxy servers Cisco ASA 1000V Cloud Firewall Hardware solutions / Security hardware applicances Cisco ASA 5500-X Series Hardware solutions / Security hardware applicances Cisco ASA 5500 Hardware solutions / Security hardware applicances Cisco Firepower 9300 Security Appliance Hardware solutions / Security hardware applicances Cisco Adaptive Security Virtual Appliance (ASAv) Server applications / Virtualization software Cisco Firepower 4100 Series Next-Generation Firewall Hardware solutions / Firmware Other |
| Vendor |
Cisco Systems, Inc |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
1) Path traversal
EUVDB-ID: #VU13246
Risk: Medium
CVSSv4.0: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:A/U:Green]
CVE-ID: CVE-2018-0296
CWE-ID:
CWE-23 - Relative Path Traversal
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists in the web interface of the Cisco Adaptive Security Appliance (ASA) due to lack of proper input validation of the HTTP URL. A remote attacker can send a specially crafted HTTP request and cause the device to reload unexpectedly or read contest of arbitrary file on the system using directory traversal sequences.
MitigationInstall update from vendor's website.
Vulnerable software versions3000 Series Industrial Security Appliance (ISA): All versions
Cisco ASA 1000V Cloud Firewall: All versions
Cisco ASA 5500-X Series: All versions
Cisco ASA 5500: All versions
Cisco Adaptive Security Virtual Appliance (ASAv): All versions
Firepower 2100 Series Security Appliance: All versions
Cisco Firepower 4100 Series Next-Generation Firewall: All versions
Cisco Firepower 9300 Security Appliance: All versions
: All versions
CPE2.3- cpe:2.3:a:cisco_systems:3000_series_industrial_security_appliance_isa:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:cisco_asa_1000v_cloud_firewall:*:*:*:*:*:asa:*:*
- cpe:2.3:h:cisco_systems:cisco_asa_5500-x_series:*:*:*:*:*:asa:*:*
- cpe:2.3:h:cisco_systems:cisco_asa_5500:*:*:*:*:*:asa:*:*
- cpe:2.3:a:cisco_systems:cisco_adaptive_security_virtual_appliance_asav:*:*:*:*:*:asa:*:*
- cpe:2.3:a:cisco_systems:firepower_2100_series_security_appliance:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:cisco_firepower_4100_series_next-generation_firewall:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:cisco_firepower_9300_security_appliance:*:*:*:*:*:*:*:*
- cpe:2.3::::*:*:*:*:*:*:*:*
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-asaftd
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
