#VU15667 Input validation error in Cisco Systems, Inc products - CVE-2018-15454
Published: November 1, 2018
Vulnerability identifier: #VU15667
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber
CVE-ID: CVE-2018-15454
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerable software:
Cisco Firepower 9300 Security Appliance
Cisco 7600 Series ASA Services Module
Cisco ASA 5500-X Series
Cisco Firepower 4100 Series Next-Generation Firewall
Firepower 2100 Series Security Appliance
3000 Series Industrial Security Appliance (ISA)
Cisco Adaptive Security Virtual Appliance (ASAv)
Cisco Firepower 9300 Security Appliance
Cisco 7600 Series ASA Services Module
Cisco ASA 5500-X Series
Cisco Firepower 4100 Series Next-Generation Firewall
Firepower 2100 Series Security Appliance
3000 Series Industrial Security Appliance (ISA)
Cisco Adaptive Security Virtual Appliance (ASAv)
Software vendor:
Cisco Systems, Inc
Cisco Systems, Inc
Description
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of SIP traffic. A remote attacker can send specially crafted SIP packets to the affected device, cause high CPU load that may lead to denial of service conditions.
Note, this vulnerability is being actively exploited in the wild against a limited number of targets.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.