CVE-2018-0231
published 2018-04-19CVE-2018-0231: A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)…
PriorityP352high8.6CVSS 3.0
AVNACLPRNUINSCCNINAH
EPSS
4.44%
91.3th percentile
A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious TLS message to an interface enabled for Secure Layer Socket (SSL) services on an affected device. Messages using SSL Version 3 (SSLv3) or SSL Version 2 (SSLv2) cannot be be used to exploit this vulnerability. An exploit could allow the attacker to cause a buffer underflow, triggering a crash on an affected device. This vulnerability affects Cisco ASA Software and Cisco FTD Software that is running on the following Cisco products: Adaptive Security Virtual Appliance (ASAv), Firepower Threat Defense Virtual (FTDv), Firepower 2100 Series Security Appliance. Cisco Bug IDs: CSCve18902, CSCve34335, CSCve38446.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_tls | — | — |
| cisco | secure_firewall_threat_defense | >= 6.0 < 6.1.0.6 | 6.1.0.6 |
| cisco | secure_firewall_threat_defense | >= 6.2.1 < 6.2.2.1 | 6.2.2.1 |
CVSS provenance
nvdv3.08.6HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco8.6HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Rockwell Automation Allen-Bradley Stratix 5950
cisa_ics·2018-07-03·CVSS 8.6
[HIGH] Rockwell Automation Allen-Bradley Stratix 5950
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Rockwell Automation Allen-Bradley Stratix 5950
Last RevisedJuly 03, 2018
Alert CodeICSA-18-184-01
## 1. EXECUTIVE SUMMARY
-
CVSS v3 8.6
- ATTENTION: Exploitable remotely/low skill level to exploit
- Vendor: Rockwell Automation
- Equipment: Allen-Bradley Stratix 5950
- Vulnerabilities: Improper Input Validation, Improper Certificate Validation, Resource Management Errors
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to bypass client certification to create connections to the affected device or cause the device to crash.
## 3
Cisco
Cisco Adaptive Security Appliance TLS Denial of Service Vulnerability
vendor_cisco·2018-04-18·CVSS 8.6
CVE-2018-0231 [HIGH] CWE-20 Cisco Adaptive Security Appliance TLS Denial of Service Vulnerability
Cisco Adaptive Security Appliance TLS Denial of Service Vulnerability
A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service (DoS) condition.
The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious TLS message to an interface enabled for Secure Layer Socket (SSL) services on an affected device. Messages using SSL Version 3 (SSLv3) or SSL Version 2 (SSLv2) cannot be be used to exploit this vulnerability. An exploit could allow the attacker to cause a buffer underflow, trig
Cisco
Cisco Adaptive Security Appliance TLS Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2018-0231 Cisco Adaptive Security Appliance TLS Denial of Service Vulnerability
CVE-2018-0231: Cisco Adaptive Security Appliance TLS Denial of Service Vulnerability
A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious TLS message to an interface enabled for Secure Layer Socket (SSL) services on an affected device. Messages using SSL Version 3 (SSLv3) or SSL Version 2 (SSLv2) cannot be be used to exploit this vulnerability. An exploit could allow the attacker to cause a buffer un
VulDB
Cisco ASA/Firepower Threat Defense TLS Library TLS Message input validation (Nessus ID 109404 / ID 316240)
vuldb·2026-08-12·CVSS 8.6
CVE-2018-0231 [HIGH] Cisco ASA/Firepower Threat Defense TLS Library TLS Message input validation (Nessus ID 109404 / ID 316240)
A vulnerability identified as problematic has been detected in Cisco ASA and Firepower Threat Defense. This vulnerability affects unknown code of the component TLS Library. The manipulation as part of TLS Message leads to improper input validation.
This vulnerability is uniquely identified as CVE-2018-0231. The attack is possible to be carried out remotely. No exploit exists.
You should upgrade the affected component.
GHSA
GHSA-wq2j-24r5-rxj2: A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (
ghsa_unreviewed·2022-05-13
CVE-2018-0231 [HIGH] CWE-20 GHSA-wq2j-24r5-rxj2: A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (
A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious TLS message to an interface enabled for Secure Layer Socket (SSL) services on an affected device. Messages using SSL Version 3 (SSLv3) or SSL Version 2 (SSLv2) cannot be be used to exploit this vulnerability. An exploit could allow the attacker to cause a buffer underflow, triggering a crash on an affected device. This vulnerability affects Cisco A
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securitytracker.com/id/1040725https://ics-cert.us-cert.gov/advisories/ICSA-18-184-01https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa3http://www.securitytracker.com/id/1040725https://ics-cert.us-cert.gov/advisories/ICSA-18-184-01https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa3
2018-04-19
Published