Lucene search

CVE-2018-0227

🗓️ 19 Apr 2018 20:00:29Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 59 Views

A vulnerability in SSL VPN Client Cert Authentication feature for Cisco ASA allows remote attacker to bypass certificate verification

Reporter	Title	Published	Views	Family All 8
Prion	Authentication flaw	19 Apr 201820:29	–	prion
Cisco	Cisco Adaptive Security Appliance Virtual Private Network SSL Client Certificate Bypass Vulnerability	18 Apr 201816:00	–	cisco
Cvelist	CVE-2018-0227	19 Apr 201820:00	–	cvelist
NVD	CVE-2018-0227	19 Apr 201820:29	–	nvd
Vulnrichment	CVE-2018-0227	19 Apr 201820:00	–	vulnrichment
Tenable Nessus	Cisco FTD Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)	17 Jan 202000:00	–	nessus
Tenable Nessus	Cisco ASA Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)	27 Apr 201800:00	–	nessus
ICS	Rockwell Automation Allen-Bradley Stratix 5950	3 Jul 201800:00	–	ics

Nvd

Node

cisco adaptive_security_appliance_softwareRange9.4.4–9.4.4.13

cisco adaptive_security_appliance_softwareRange9.5.3.7–9.5.3.9

cisco adaptive_security_appliance_softwareRange9.6.2.9–9.6.2.21

cisco adaptive_security_appliance_softwareRange9.6.3–9.6.3.17

cisco adaptive_security_appliance_softwareMatch9.4.3.1

cisco adaptive_security_appliance_softwareMatch9.4.3.2

cisco adaptive_security_appliance_softwareMatch9.5.2.7

cisco adaptive_security_appliance_softwareMatch9.5.2.8

Node

cisco firepower_threat_defenseRange6.0–6.0.1.4

cisco firepower_threat_defenseRange6.1.0–6.1.0.5

[
  {
    "product": "Cisco Adaptive Security Appliance",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Adaptive Security Appliance"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/104018
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa1
securitytracker	www.securitytracker.com/id/1040723
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-184-01

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Apr 2018 20:29Current

8.1High risk

Vulners AI Score8.1

CVSS25

CVSS37.5

EPSS0.00132

SSVC

CWE-295