CVE-2018-0227

🗓️ 19 Apr 2018 20:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 67 Views

A vulnerability in SSL VPN Client Cert Authentication feature for Cisco ASA allows remote attacker to bypass certificate verification

Reporter	Title	Published	Views	Family All 13
Tenable Nessus	Rockwell Automation Stratix 5950 Industrial EtherNet/IP Security Appliance < 15.3 Improper Input and Certificate Validation	19 Aug 201900:00	–	nessus
Tenable Nessus	Cisco FTD Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)	17 Jan 202000:00	–	nessus
Tenable Nessus	Cisco ASA Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)	27 Apr 201800:00	–	nessus
Circl	CVE-2018-0227	31 Dec 201807:31	–	circl
Cisco	Cisco Adaptive Security Appliance Virtual Private Network SSL Client Certificate Bypass Vulnerability	18 Apr 201816:00	–	cisco
CNVD	SSL Certificate Validation Security Bypass Vulnerability in Multiple Cisco Products	5 Jul 201800:00	–	cnvd
Cvelist	CVE-2018-0227	19 Apr 201820:00	–	cvelist
EUVD	EUVD-2018-1050	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation Allen-Bradley Stratix 5950	3 Jul 201800:00	–	ics
NVD	CVE-2018-0227	19 Apr 201820:29	–	nvd

NVD

Node

cisco adaptive_security_appliance_softwareRange9.4.4–9.4.4.13

cisco adaptive_security_appliance_softwareRange9.5.3.7–9.5.3.9

cisco adaptive_security_appliance_softwareRange9.6.2.9–9.6.2.21

cisco adaptive_security_appliance_softwareRange9.6.3–9.6.3.17

cisco adaptive_security_appliance_softwareMatch9.4.3.1

cisco adaptive_security_appliance_softwareMatch9.4.3.2

cisco adaptive_security_appliance_softwareMatch9.5.2.7

cisco adaptive_security_appliance_softwareMatch9.5.2.8

Node

cisco firepower_threat_defenseRange6.0–6.0.1.4

cisco firepower_threat_defenseRange6.1.0–6.1.0.5

[
  {
    "product": "Cisco Adaptive Security Appliance",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Adaptive Security Appliance"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1040723
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-184-01
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa1
securityfocus	www.securityfocus.com/bid/104018

21 Nov 2024 03:37Current

8.1High risk

Vulners AI Score8.1

CVSS 25

CVSS 3.17.5

EPSS0.01079

SSVC

CWE-295