Firetruck

CVE-2018-0296

KEV

Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

View CVE record →
Vendor / Project
Cisco
Product
Adaptive Security Appliance (ASA)
Date added
Nov 3, 2021
Due date
May 3, 2022
Known ransomware use
Unknown
CWEs
CWE-20

Description

Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an attacker to cause a denial-of-service (DoS) condition or information disclosure.

Required action

Apply updates per vendor instructions.

Notes