Cisco ASA Uncontrolled Resource Consumption (CVE-2018-0230)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(506048);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/06");

  script_cve_id("CVE-2018-0230");

  script_name(english:"Cisco ASA Uncontrolled Resource Consumption (CVE-2018-0230)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"A vulnerability in the internal packet-processing functionality of
Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100
Series Security Appliances could allow an unauthenticated, remote
attacker to cause an affected device to stop processing traffic,
resulting in a denial of service (DoS) condition. The vulnerability is
due to the affected software improperly validating IP Version 4 (IPv4)
and IP Version 6 (IPv6) packets after the software reassembles the
packets (following IP Fragmentation). An attacker could exploit this
vulnerability by sending a series of malicious, fragmented IPv4 or
IPv6 packets to an affected device. A successful exploit could allow
the attacker to cause Snort processes on the affected device to hang
at 100% CPU utilization, which could cause the device to stop
processing traffic and result in a DoS condition until the device is
reloaded manually. This vulnerability affects Cisco Firepower Threat
Defense (FTD) Software Releases 6.2.1 and 6.2.2, if the software is
running on a Cisco Firepower 2100 Series Security Appliance. Cisco Bug
IDs: CSCvf91098.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fp2100
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b3b3a5bd");
  script_set_attribute(attribute:"see_also", value:"http://www.securityfocus.com/bid/103931");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-0230");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(400);

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/04/19");
  script_set_attribute(attribute:"patch_publication_date", value:"2018/04/19");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/05");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:adaptive_security_appliance_software:9.8%282%29");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Cisco");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Cisco');

var asset = tenable_ot::assets::get(vendor:'Cisco');

var vuln_cpes = {
    "cpe:/o:cisco:adaptive_security_appliance_software:9.8%282%29" :
        {"versionEndIncluding" : "9.8%282%29", "versionStartIncluding" : "9.8%282%29", "family" : "CiscoFirepower"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);