CVE-2018-0296

🗓️ 07 Jun 2018 12:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 1238 Views🌐 WEB

CVE-2018-0296: Cisco ASA Web Interface Vulnerabilit

Reporter	Title	Published	Views	Family All 52
0day.today	Cisco Adaptive Security Appliance - Path Traversal Exploit	29 Jun 201800:00	–	zdt
0day.today	Cisco Adaptive Security Appliance Path Traversal Exploit	24 Jul 201800:00	–	zdt
0day.today	Cisco Adaptive Security Appliance - Path Traversal Exploit	12 Aug 201900:00	–	zdt
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Ios	22 Jan 201821:15	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software	21 Jun 201815:44	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software	28 Sep 202005:00	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software	21 Jun 201808:36	–	githubexploit
ATTACKERKB	CVE-2025-20362	25 Sep 202516:12	–	attackerkb
ATTACKERKB	Cisco ASA Directory Traversal	7 Jun 201800:00	–	attackerkb
BDU FSTEC	The vulnerability of the web interface of Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) allows a perpetrator to cause service interruptions or expose sensitive information.	13 Dec 201800:00	–	bdu_fstec

NVD

Node

cisco adaptive_security_appliance_softwareRange9.1–9.1.7.29

cisco adaptive_security_appliance_softwareRange9.2–9.2.4.33

cisco adaptive_security_appliance_softwareRange9.3–9.4.4.18

cisco adaptive_security_appliance_softwareRange9.5–9.6.4.8

cisco adaptive_security_appliance_softwareRange9.7–9.7.1.24

cisco adaptive_security_appliance_softwareRange9.8–9.8.2.28

cisco adaptive_security_appliance_softwareRange9.9–9.9.2.1

Node

cisco firepower_threat_defenseRange6.0–6.1.0

cisco firepower_threat_defenseRange6.2.1–6.2.2.3

cisco firepower_threat_defenseMatch6.2.3

cisco firepower_threat_defenseMatch6.2.3-85.02

cisco firepower_threat_defenseMatch6.2.3-851

cisco firepower_threat_defenseMatch6.2.3.1

[
  {
    "product": "Cisco Adaptive Security Appliance unknown",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Adaptive Security Appliance unknown"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-184-01
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-asaftd
exploit-db	www.exploit-db.com/exploits/44956/
securitytracker	www.securitytracker.com/id/1041076
packetstormsecurity	www.packetstormsecurity.com/files/154017/Cisco-Adaptive-Security-Appliance-Path-Traversal.html
securityfocus	www.securityfocus.com/bid/104612
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
path	query param	+CSCOU+/../+CSCOE+/files/file_list.json?path=/	Path traversal to access file_list.json via crafted path parameter	CWE-20, CWE-22
path	query param	+CSCOU+/../+CSCOE+/files/file_list.json?path=%2bCSCOE%2b	Path traversal with encoded traversal sequence	CWE-20, CWE-22
path	query param	+CSCOU+/../+CSCOE+/files/file_list.json?path=/sessions/	Access sessions directory via path traversal	CWE-20, CWE-22

17 Jun 2026 01:30Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 3.17.5

EPSS0.99903

SSVC

cisco asa vulnerability http dos cisco asa software cisco firepower threat defense nvd cve-2018-0296