Lucene search

CiscoCVE-2018-15388

HistoryMay 03, 2019 - 3:29 p.m.

CVE-2018-15388

2019-05-0315:29:00

CWE-400

cisco

web.nvd.nist.gov

cve-2018-15388

cisco

asa

ftd

webvpn

vulnerability

cpu utilization

remote attacker

dos

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

8.4

Confidence

High

EPSS

0.002

Percentile

52.7%

JSON

A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing load for existing WebVPN login operations. An attacker could exploit this vulnerability by sending multiple WebVPN login requests to the device. A successful exploit could allow the attacker to increase CPU load on the device, resulting in a denial of service (DoS) condition.

Affected configurations

Nvd

Vulners

Node

ciscoadaptive_security_appliance_softwareRange<9.4.4.34

ciscoadaptive_security_appliance_softwareRange9.5–9.6.4.25

ciscoadaptive_security_appliance_softwareRange9.7–9.8.4

ciscoadaptive_security_appliance_softwareRange9.9–9.9.2.50

AND

ciscoasa_5505Match-

ciscoasa_5510Match-

ciscoasa_5512-xMatch-

ciscoasa_5515-xMatch-

ciscoasa_5520Match-

ciscoasa_5525-xMatch-

ciscoasa_5540Match-

ciscoasa_5545-xMatch-

ciscoasa_5550Match-

ciscoasa_5555-xMatch-

ciscoasa_5580Match-

ciscoasa_5585-xMatch-

Node

ciscofirepower_threat_defenseRange<6.2.3.12

VendorProductVersionCPE
ciscoadaptive_security_appliance_software*cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
ciscoadaptive_security_appliance_software*cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
ciscoasa_5505-cpe:2.3:h:cisco:asa_5505:-:*:*:*:*:*:*:*
ciscoasa_5510-cpe:2.3:h:cisco:asa_5510:-:*:*:*:*:*:*:*
ciscoasa_5512-x-cpe:2.3:h:cisco:asa_5512-x:-:*:*:*:*:*:*:*
ciscoasa_5515-x-cpe:2.3:h:cisco:asa_5515-x:-:*:*:*:*:*:*:*
ciscoasa_5520-cpe:2.3:h:cisco:asa_5520:-:*:*:*:*:*:*:*
ciscoasa_5525-x-cpe:2.3:h:cisco:asa_5525-x:-:*:*:*:*:*:*:*
ciscoasa_5540-cpe:2.3:h:cisco:asa_5540:-:*:*:*:*:*:*:*
ciscoasa_5545-x-cpe:2.3:h:cisco:asa_5545-x:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	adaptive_security_appliance_software	*	cpe:2.3:a:cisco:adaptive_security_appliance_software::::::::
cisco	adaptive_security_appliance_software	*	cpe:2.3:o:cisco:adaptive_security_appliance_software::::::::
cisco	asa_5505	-	cpe:2.3:h:cisco:asa_5505:-:::::::*
cisco	asa_5510	-	cpe:2.3:h:cisco:asa_5510:-:::::::*
cisco	asa_5512-x	-	cpe:2.3:h:cisco:asa_5512-x:-:::::::*
cisco	asa_5515-x	-	cpe:2.3:h:cisco:asa_5515-x:-:::::::*
cisco	asa_5520	-	cpe:2.3:h:cisco:asa_5520:-:::::::*
cisco	asa_5525-x	-	cpe:2.3:h:cisco:asa_5525-x:-:::::::*
cisco	asa_5540	-	cpe:2.3:h:cisco:asa_5540:-:::::::*
cisco	asa_5545-x	-	cpe:2.3:h:cisco:asa_5545-x:-:::::::*

Rows per page:

1-10 of 151

CNA Affected

[
  {
    "product": "Cisco Adaptive Security Appliance (ASA) Software",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "9.4.4.34",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.6.4.25",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.8.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "9.9.2.50",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-sd-cpu-dos

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

8.4

Confidence

High

EPSS

0.002

Percentile

52.7%

JSON

Related for CVE-2018-15388