The vulnerability of the VPN Secure Sockets Layer (SSL) function of the microprogramming network interface device in Cisco Adaptive Security Appliance (ASA) allows a hacker to execute arbitrary code and gain full control over the system.

🗓️ 09 Feb 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 13 Views

Remote attacker exploits Cisco Adaptive Security Appliance secure sockets layer memory error to execute code.

Reporter	Title	Published	Views	Family All 31
zdt	Cisco ASA - Crash PoC Exploit	7 Feb 201800:00	–	zdt
ATTACKERKB	CVE-2018-0101	29 Jan 201820:29	–	attackerkb
Circl	CVE-2018-0101	31 Jan 201817:52	–	circl
Cisco	Cisco Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability	29 Jan 201817:00	–	cisco
Tenable Nessus	Cisco Firepower Threat Defense (FTD) Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability (cisco-sa-20180129-asa1)	6 Feb 201800:00	–	nessus
Tenable Nessus	Cisco ASA Remote Code Execution and Denial of Service Vulnerability (cisco-sa-20180129-asa1)	30 Jan 201800:00	–	nessus
Tenable Nessus	Cisco ASA Remote Code Execution and Denial of Service Vulnerability (cisco-sa-20180129-asa1) (destructive check)	26 Feb 201800:00	–	nessus
Tenable Nessus	Cisco ASA/FTD WebVPN Double Free (CVE-2018-0101)	20 Jul 202600:00	–	nessus
CNVD	Cisco Adaptive Security Appliance Remote Code Execution Vulnerability	31 Jan 201800:00	–	cnvd
Check Point Advisories	Cisco Adaptive Security Appliance Remote Code Execution (CVE-2018-0101)	1 Feb 201800:00	–	checkpoint_advisories

Vulners

Node

OR

cisco_systems adaptive_security_applianceMatch8

cisco_systems adaptive_security_applianceRange9.0–9.1.7.23

cisco_systems adaptive_security_applianceRange9.2–9.2.4.27

cisco_systems adaptive_security_applianceRange9.3–9.4.4.16

cisco_systems adaptive_security_applianceRange9.5–9.6.4.3

cisco_systems adaptive_security_applianceRange9.7–9.7.1.21

cisco_systems adaptive_security_applianceRange9.8–9.8.2.20

cisco_systems adaptive_security_applianceRange9.9–9.9.1.2

cisco_systems firepower_threat_defenseMatch6.1.0

cisco_systems firepower_threat_defenseMatch6.2.0

cisco_systems firepower_threat_defenseMatch6.2.1

cisco_systems firepower_threat_defenseMatch6.2.2

cisco_systems firepower_threat_defenseMatch6.0.1

cisco_systems adaptive_security_applianceRange<9.1.7.23

cisco_systems adaptive_security_applianceRange9.2.0–9.2.4.27

cisco_systems adaptive_security_applianceRange9.3.0–9.4.4.16

cisco_systems adaptive_security_applianceRange9.5.0–9.6.4.3

cisco_systems adaptive_security_applianceRange9.7.0–9.7.1.21

cisco_systems adaptive_security_applianceRange9.8.0–9.8.2.20

cisco_systems adaptive_security_applianceRange9.9.0–9.9.1.2

cisco_systems firepower_threat_defenseMatch6.0.0

Source	Link
securityfocus	www.securityfocus.com/bid/102845
securitytracker	www.securitytracker.com/id/1040292
icanthackit	www.icanthackit.wordpress.com/2018/01/30/thoughts-on-the-handling-cve-2018-0101-cisco-bug-cscvg35618/
pastebin	www.pastebin.com/YrBcG2Ln
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1
exploit-db	www.exploit-db.com/exploits/43986/
web	www.web.nvd.nist.gov/view/vuln/detail

24 Aug 2023 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 210

CVSS 310

EPSS0.8678

Cisco Adaptive Security Appliance secure sockets layer memory reclamation error remote code execution