PT-2018-1004 · Cisco · Cisco Asa

Aleph___Naught + 2 · Published 2018-01-28 · Updated 2024-04-24 · CVE-2018-0101

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions prior to the fixed version

Description A vulnerability in the Secure Sockets Layer (SSL) VPN functionality could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The issue is due to an attempt to double free a region of memory when the webvpn feature is enabled. An attacker could exploit this by sending multiple, crafted XML packets to a webvpn-configured interface. This could allow the attacker to execute arbitrary code and obtain full control of the system, or cause a reload of the affected device.

Recommendations For Cisco ASA Software, update to a fixed version to resolve the issue. As a temporary workaround, consider disabling the webvpn feature until a patch is available. Restrict access to webvpn-configured interfaces to minimize the risk of exploitation. Avoid using crafted XML packets in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability, however, it is recommended to check the Fixed Software section for more information.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2018-00188

CVE-2018-0101

Affected Products

Cisco Asa

References · 14

• 🔥 https://github.com/Cymmetria/ciscoasa_honeypot · Exploit
• 🔥 https://github.com/1337g/CVE-2018-0101-DOS-POC · Exploit
• 🔥 https://exploit-db.com/exploits/43986 · Exploit
• 🔥 https://pastebin.com/YrBcG2Ln · Exploit
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00188 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0101 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0101 · Vendor Advisory
• https://t.me/aptreports/9423 · Telegram Post
• https://twitter.com/expankita/status/1698822261875106096 · Twitter Post
• https://icanthackit.wordpress.com/2018/01/30/thoughts-on-the-handling-cve-2018-0101-cisco-bug-cscvg35618 · Note
• http://securitytracker.com/id/1040292 · Note
• http://securityfocus.com/bid/102845 · Note