CVE-2018-0227

🗓️ 19 Apr 2018 20:29:00Reported by [email protected]Type

A vulnerability in SSL VPN Client Certificate Authentication feature for Cisco ASA could allow an unauthenticated remote attacker to bypass certificate verification steps

Reporter	Title	Published	Views	Family All 13
Tenable Nessus	Rockwell Automation Stratix 5950 Industrial EtherNet/IP Security Appliance < 15.3 Improper Input and Certificate Validation	19 Aug 201900:00	–	nessus
Tenable Nessus	Cisco FTD Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)	17 Jan 202000:00	–	nessus
Tenable Nessus	Cisco ASA Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)	27 Apr 201800:00	–	nessus
Circl	CVE-2018-0227	31 Dec 201807:31	–	circl
Cisco	Cisco Adaptive Security Appliance Virtual Private Network SSL Client Certificate Bypass Vulnerability	18 Apr 201816:00	–	cisco
CNVD	SSL Certificate Validation Security Bypass Vulnerability in Multiple Cisco Products	5 Jul 201800:00	–	cnvd
CVE	CVE-2018-0227	19 Apr 201820:00	–	cve
Cvelist	CVE-2018-0227	19 Apr 201820:00	–	cvelist
EUVD	EUVD-2018-1050	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation Allen-Bradley Stratix 5950	3 Jul 201800:00	–	ics

NVD

Node

cisco adaptive_security_appliance_softwareRange9.4.4–9.4.4.13

cisco adaptive_security_appliance_softwareRange9.5.3.7–9.5.3.9

cisco adaptive_security_appliance_softwareRange9.6.2.9–9.6.2.21

cisco adaptive_security_appliance_softwareRange9.6.3–9.6.3.17

cisco adaptive_security_appliance_softwareMatch9.4.3.1

cisco adaptive_security_appliance_softwareMatch9.4.3.2

cisco adaptive_security_appliance_softwareMatch9.5.2.7

cisco adaptive_security_appliance_softwareMatch9.5.2.8

Node

cisco firepower_threat_defenseRange6.0–6.0.1.4

cisco firepower_threat_defenseRange6.1.0–6.1.0.5

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-184-01
securityfocus	www.securityfocus.com/bid/104018
securitytracker	www.securitytracker.com/id/1040723
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa1

21 Nov 2024 03:37Current

7.9High risk

Vulners AI Score7.9

CVSS 25

CVSS 3.17.5

EPSS0.01079

CWE-295