Cisco Adaptive Security Appliance Software CVE-2018-0296 Denial of Service Vulnerability

Cisco Adaptive Security Appliance (ASA) is prone to a remote denial-of-service vulnerability.

Successful exploits may allow an attacker to reload the affected device, resulting in a denial-of-service conditions.

This issue is being tracked by Cisco Bug ID CSCvi16029.

Information

Bugtraq ID: 104612
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2018-0296

Remote: Yes
Local: No
Published: Jun 06 2018 12:00AM
Updated: Jun 06 2018 12:00AM
Credit: Michal Bentkowski of Securitum.
Vulnerable: Cisco Firepower Threat Defense Software (FTD) 6.2.2
Cisco Firepower Threat Defense Software (FTD) 6.2.1
Cisco Firepower Threat Defense Software 6.2.3
Cisco Firepower Threat Defense Software 6.2.2
Cisco Firepower Threat Defense Software 6.2
Cisco Firepower Threat Defense Software 6.1
Cisco Firepower Threat Defense Software 6.2.2.2
Cisco Firepower Threat Defense Software 6.2.2.1
Cisco Firepower Threat Defense Software 6.2.1
Cisco Firepower Threat Defense Software 6.2.0.5
Cisco Firepower Threat Defense Software 6.1.0.6
Cisco Firepower Threat Defense Software 6.1.0.5
Cisco Firepower Threat Defense Software 6.0.1.4
Cisco Firepower Threat Defense Software 6.0.1
Cisco Firepower Threat Defense Software 6.0
Cisco ASA 5500 Series Adaptive Security Appliances 0
Cisco Adaptive Security Appliance (ASA) Software 9.6.3
Cisco Adaptive Security Appliance (ASA) Software 9.4.4
Cisco Adaptive Security Appliance (ASA) Software 9.4.1
Cisco Adaptive Security Appliance (ASA) Software 9.3.3
Cisco Adaptive Security Appliance (ASA) Software 9.3.2
Cisco Adaptive Security Appliance (ASA) Software 9.3.1 1
Cisco Adaptive Security Appliance (ASA) Software 9.3.1
Cisco Adaptive Security Appliance (ASA) Software 9.2.8
Cisco Adaptive Security Appliance (ASA) Software 9.2.3
Cisco Adaptive Security Appliance (ASA) Software 9.2.2 7
Cisco Adaptive Security Appliance (ASA) Software 9.2.2 4
Cisco Adaptive Security Appliance (ASA) Software 9.2.2
Cisco Adaptive Security Appliance (ASA) Software 9.2.1
Cisco Adaptive Security Appliance (ASA) Software 9.1.7
Cisco Adaptive Security Appliance (ASA) Software 9.1.5 15
Cisco Adaptive Security Appliance (ASA) Software 9.1.5 12
Cisco Adaptive Security Appliance (ASA) Software 9.1.5 10
Cisco Adaptive Security Appliance (ASA) Software 9.1.5
Cisco Adaptive Security Appliance (ASA) Software 9.1.4
Cisco Adaptive Security Appliance (ASA) Software 9.1.3 4
Cisco Adaptive Security Appliance (ASA) Software 9.1.1 5
Cisco Adaptive Security Appliance (ASA) Software 9.1.1 4.5
Cisco Adaptive Security Appliance (ASA) Software 9.1.1 3.2
Cisco Adaptive Security Appliance (ASA) Software 9.1.1 3
Cisco Adaptive Security Appliance (ASA) Software 9.1.1 2.8
Cisco Adaptive Security Appliance (ASA) Software 9.1.1 2
Cisco Adaptive Security Appliance (ASA) Software 9.1.1 1.4
Cisco Adaptive Security Appliance (ASA) Software 9.0.4 5
Cisco Adaptive Security Appliance (ASA) Software 9.0.4
Cisco Adaptive Security Appliance (ASA) Software 9.0.3
Cisco Adaptive Security Appliance (ASA) Software 9.0.2
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.7
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.5
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.24
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.20
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.17
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4.1
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 4
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 3.6
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 3
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 2.10
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 2
Cisco Adaptive Security Appliance (ASA) Software 9.9
Cisco Adaptive Security Appliance (ASA) Software 9.8
Cisco Adaptive Security Appliance (ASA) Software 9.7(1)
Cisco Adaptive Security Appliance (ASA) Software 9.7(0.99)
Cisco Adaptive Security Appliance (ASA) Software 9.7
Cisco Adaptive Security Appliance (ASA) Software 9.6.4(6)
Cisco Adaptive Security Appliance (ASA) Software 9.6.4(3)
Cisco Adaptive Security Appliance (ASA) Software 9.6.3.20
Cisco Adaptive Security Appliance (ASA) Software 9.6.3.17
Cisco Adaptive Security Appliance (ASA) Software 9.6.3(1)
Cisco Adaptive Security Appliance (ASA) Software 9.6.2.9
Cisco Adaptive Security Appliance (ASA) Software 9.6.2.21
Cisco Adaptive Security Appliance (ASA) Software 9.6.2
Cisco Adaptive Security Appliance (ASA) Software 9.6.1(11)
Cisco Adaptive Security Appliance (ASA) Software 9.6(3)
Cisco Adaptive Security Appliance (ASA) Software 9.6(2.99)
Cisco Adaptive Security Appliance (ASA) Software 9.6(2.10)
Cisco Adaptive Security Appliance (ASA) Software 9.6(1.5)
Cisco Adaptive Security Appliance (ASA) Software 9.6
Cisco Adaptive Security Appliance (ASA) Software 9.5.3.9
Cisco Adaptive Security Appliance (ASA) Software 9.5.3.7
Cisco Adaptive Security Appliance (ASA) Software 9.5.2.8
Cisco Adaptive Security Appliance (ASA) Software 9.5.2.7
Cisco Adaptive Security Appliance (ASA) Software 9.5(3)
Cisco Adaptive Security Appliance (ASA) Software 9.5(2.6)
Cisco Adaptive Security Appliance (ASA) Software 9.5(2.2)
Cisco Adaptive Security Appliance (ASA) Software 9.5(2)
Cisco Adaptive Security Appliance (ASA) Software 9.5(1.4)
Cisco Adaptive Security Appliance (ASA) Software 9.5
Cisco Adaptive Security Appliance (ASA) Software 9.4.4.6
Cisco Adaptive Security Appliance (ASA) Software 9.4.4.14
Cisco Adaptive Security Appliance (ASA) Software 9.4.4.13
Cisco Adaptive Security Appliance (ASA) Software 9.4.3.3
Cisco Adaptive Security Appliance (ASA) Software 9.4.3.2
Cisco Adaptive Security Appliance (ASA) Software 9.4.3.1
Cisco Adaptive Security Appliance (ASA) Software 9.4.3(8)
Cisco Adaptive Security Appliance (ASA) Software 9.4.2.6
Cisco Adaptive Security Appliance (ASA) Software 9.4.(0.115)
Cisco Adaptive Security Appliance (ASA) Software 9.4(4)
Cisco Adaptive Security Appliance (ASA) Software 9.4(3.6)
Cisco Adaptive Security Appliance (ASA) Software 9.4(2.6)
Cisco Adaptive Security Appliance (ASA) Software 9.4(2.4)
Cisco Adaptive Security Appliance (ASA) Software 9.4(2)
Cisco Adaptive Security Appliance (ASA) Software 9.4 (1.1)
Cisco Adaptive Security Appliance (ASA) Software 9.4
Cisco Adaptive Security Appliance (ASA) Software 9.3.3.8
Cisco Adaptive Security Appliance (ASA) Software 9.3.3(10)
Cisco Adaptive Security Appliance (ASA) Software 9.3(3.9)
Cisco Adaptive Security Appliance (ASA) Software 9.3(3.8)
Cisco Adaptive Security Appliance (ASA) Software 9.3(3.7)
Cisco Adaptive Security Appliance (ASA) Software 9.3(3.11)
Cisco Adaptive Security Appliance (ASA) Software 9.3(3)
Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243)
Cisco Adaptive Security Appliance (ASA) Software 9.3(2.100)
Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50)
Cisco Adaptive Security Appliance (ASA) Software 9.3(1.105)
Cisco Adaptive Security Appliance (ASA) Software 9.3(1.1)
Cisco Adaptive Security Appliance (ASA) Software 9.3
Cisco Adaptive Security Appliance (ASA) Software 9.2.4.6
Cisco Adaptive Security Appliance (ASA) Software 9.2.4(14)
Cisco Adaptive Security Appliance (ASA) Software 9.2.3.3
Cisco Adaptive Security Appliance (ASA) Software 9.2.2.8
Cisco Adaptive Security Appliance (ASA) Software 9.2.(3.1)
Cisco Adaptive Security Appliance (ASA) Software 9.2(4.8)
Cisco Adaptive Security Appliance (ASA) Software 9.2(4.6)
Cisco Adaptive Security Appliance (ASA) Software 9.2(4.5)
Cisco Adaptive Security Appliance (ASA) Software 9.2(4.13)
Cisco Adaptive Security Appliance (ASA) Software 9.2(4.11)
Cisco Adaptive Security Appliance (ASA) Software 9.2(4.1)
Cisco Adaptive Security Appliance (ASA) Software 9.2(3.4)
Cisco Adaptive Security Appliance (ASA) Software 9.2(3.1)
Cisco Adaptive Security Appliance (ASA) Software 9.2(2.6)
Cisco Adaptive Security Appliance (ASA) Software 9.2(2.4)
Cisco Adaptive Security Appliance (ASA) Software 9.2(2)8
Cisco Adaptive Security Appliance (ASA) Software 9.2(2)
Cisco Adaptive Security Appliance (ASA) Software 9.2(0.104)
Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0)
Cisco Adaptive Security Appliance (ASA) Software 9.2
Cisco Adaptive Security Appliance (ASA) Software 9.1.7.20
Cisco Adaptive Security Appliance (ASA) Software 9.1.7.17
Cisco Adaptive Security Appliance (ASA) Software 9.1.7(9)
Cisco Adaptive Security Appliance (ASA) Software 9.1.7(19)
Cisco Adaptive Security Appliance (ASA) Software 9.1.7(16)
Cisco Adaptive Security Appliance (ASA) Software 9.1.5.21
Cisco Adaptive Security Appliance (ASA) Software 9.1.4.5
Cisco Adaptive Security Appliance (ASA) Software 9.1.3.2
Cisco Adaptive Security Appliance (ASA) Software 9.1.3
Cisco Adaptive Security Appliance (ASA) Software 9.1.2.8
Cisco Adaptive Security Appliance (ASA) Software 9.1.2
Cisco Adaptive Security Appliance (ASA) Software 9.1.1.5
Cisco Adaptive Security Appliance (ASA) Software 9.1.1.4.5
Cisco Adaptive Security Appliance (ASA) Software 9.1.1.4
Cisco Adaptive Security Appliance (ASA) Software 9.1.1.3.2
Cisco Adaptive Security Appliance (ASA) Software 9.1.1
Cisco Adaptive Security Appliance (ASA) Software 9.1(7.7)
Cisco Adaptive Security Appliance (ASA) Software 9.1(7.6)
Cisco Adaptive Security Appliance (ASA) Software 9.1(7.16)
Cisco Adaptive Security Appliance (ASA) Software 9.1(7.13)
Cisco Adaptive Security Appliance (ASA) Software 9.1(7)
Cisco Adaptive Security Appliance (ASA) Software 9.1(6.9)
Cisco Adaptive Security Appliance (ASA) Software 9.1(6.2)
Cisco Adaptive Security Appliance (ASA) Software 9.1(6.1)
Cisco Adaptive Security Appliance (ASA) Software 9.1(6)
Cisco Adaptive Security Appliance (ASA) Software 9.1(5.7)
Cisco Adaptive Security Appliance (ASA) Software 9.1(5.12)
Cisco Adaptive Security Appliance (ASA) Software 9.1(5.106)
Cisco Adaptive Security Appliance (ASA) Software 9.1(5.1)
Cisco Adaptive Security Appliance (ASA) Software 9.1(4.5)
Cisco Adaptive Security Appliance (ASA) Software 9.1(4.3)
Cisco Adaptive Security Appliance (ASA) Software 9.1(3.4)
Cisco Adaptive Security Appliance (ASA) Software 9.1(3.2)
Cisco Adaptive Security Appliance (ASA) Software 9.1(3)
Cisco Adaptive Security Appliance (ASA) Software 9.1(2.8)
Cisco Adaptive Security Appliance (ASA) Software 9.1(2.5)
Cisco Adaptive Security Appliance (ASA) Software 9.1(2)
Cisco Adaptive Security Appliance (ASA) Software 9.1(1.8)
Cisco Adaptive Security Appliance (ASA) Software 9.1(1.7)
Cisco Adaptive Security Appliance (ASA) Software 9.1(1.2)
Cisco Adaptive Security Appliance (ASA) Software 9.1 .5.21
Cisco Adaptive Security Appliance (ASA) Software 9.1
Cisco Adaptive Security Appliance (ASA) Software 9.0.4.7
Cisco Adaptive Security Appliance (ASA) Software 9.0.4.29
Cisco Adaptive Security Appliance (ASA) Software 9.0.4.26
Cisco Adaptive Security Appliance (ASA) Software 9.0.4.24
Cisco Adaptive Security Appliance (ASA) Software 9.0.4.20
Cisco Adaptive Security Appliance (ASA) Software 9.0.4.17
Cisco Adaptive Security Appliance (ASA) Software 9.0.4.1
Cisco Adaptive Security Appliance (ASA) Software 9.0.4(40)
Cisco Adaptive Security Appliance (ASA) Software 9.0.3.8
Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6
Cisco Adaptive Security Appliance (ASA) Software 9.0.2.10
Cisco Adaptive Security Appliance (ASA) Software 9.0.1.4.5
Cisco Adaptive Security Appliance (ASA) Software 9.0.1.4.1
Cisco Adaptive Security Appliance (ASA) Software 9.0.1.4
Cisco Adaptive Security Appliance (ASA) Software 9.0.1.3.8
Cisco Adaptive Security Appliance (ASA) Software 9.0.1 3.8
Cisco Adaptive Security Appliance (ASA) Software 9.0.1
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.8)
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.42)
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.39)
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.38)
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.33)
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.32)
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.29)
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.21)
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.13)
Cisco Adaptive Security Appliance (ASA) Software 9.0(4.1)
Cisco Adaptive Security Appliance (ASA) Software 9.0(3.8)
Cisco Adaptive Security Appliance (ASA) Software 9.0(3.6)
Cisco Adaptive Security Appliance (ASA) Software 9.0(3.3)
Cisco Adaptive Security Appliance (ASA) Software 9.0(3.10)
Cisco Adaptive Security Appliance (ASA) Software 9.0(3.1)
Cisco Adaptive Security Appliance (ASA) Software 9.0(2.6)
Cisco Adaptive Security Appliance (ASA) Software 9.0(2.10)
Cisco Adaptive Security Appliance (ASA) Software 9.0(1.4)
Cisco Adaptive Security Appliance (ASA) Software 9.0

Not Vulnerable: Cisco Firepower Threat Defense Software (FTD) 6.2.2.3
Cisco Adaptive Security Appliance (ASA) Software 9.9.2.1
Cisco Adaptive Security Appliance (ASA) Software 9.8.2.28
Cisco Adaptive Security Appliance (ASA) Software 9.7.1.24
Cisco Adaptive Security Appliance (ASA) Software 9.6.4.8
Cisco Adaptive Security Appliance (ASA) Software 9.4.4.18
Cisco Adaptive Security Appliance (ASA) Software 9.2.4.33
Cisco Adaptive Security Appliance (ASA) Software 9.1.7.29

Exploit

An exploit is available. Please see the references for more information.

References:

Cisco Adaptive Security Appliance - Path Traversal (Yassine Aboukir)
Cisco Homepage (Cisco )
Cisco Adaptive Security Appliance Web Services Denial of Service Vulnerability (Cisco)
ICSA-18-184-01: Rockwell Automation Allen-Bradley Stratix 5950 (ICS CERT)
Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) (Yassineaboukir)

Source: www.securityfocus.com

Exploit Collector

Search Exploit