CVE-2018-0227

🗓️ 19 Apr 2018 20:00:00Reported by ciscoType

A vulnerability in SSL VPN Client Certificate Authentication feature for Cisco ASA could enable remote attackers to bypass certificate verification, allowing unauthorized SSL VPN connections

Reporter	Title	Published	Views	Family All 13
Tenable Nessus	Rockwell Automation Stratix 5950 Industrial EtherNet/IP Security Appliance < 15.3 Improper Input and Certificate Validation	19 Aug 201900:00	–	nessus
Tenable Nessus	Cisco FTD Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)	17 Jan 202000:00	–	nessus
Tenable Nessus	Cisco ASA Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)	27 Apr 201800:00	–	nessus
Circl	CVE-2018-0227	31 Dec 201807:31	–	circl
Cisco	Cisco Adaptive Security Appliance Virtual Private Network SSL Client Certificate Bypass Vulnerability	18 Apr 201816:00	–	cisco
CNVD	SSL Certificate Validation Security Bypass Vulnerability in Multiple Cisco Products	5 Jul 201800:00	–	cnvd
CVE	CVE-2018-0227	19 Apr 201820:00	–	cve
Cvelist	CVE-2018-0227	19 Apr 201820:00	–	cvelist
EUVD	EUVD-2018-1050	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation Allen-Bradley Stratix 5950	3 Jul 201800:00	–	ics

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa1
securitytracker	www.securitytracker.com/id/1040723
securityfocus	www.securityfocus.com/bid/104018
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-184-01

05 Jul 2018 17:57Current

7High risk

Vulners AI Score7

EPSS0.02047

SSVC

CWE-295