Cisco ASA DoS bug attacked in wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-0296 | Unauthenticated DoS and Information Disclosure in Cisco ASA HTTP Web Services | 7.5 | 100% | KEVPoC ×2 | KEV |
From the original article
2 min read at blog.talosintelligence.com
Cisco Talos has recently noticed a sudden spike in exploitation attempts against a specific vulnerability in our Cisco Adaptive Security Appliance (ASA) and Firepower Appliance. The vulnerability, CVE-2018-0296 , is a denial-of-service and information disclosure directory traversal bug found in the web framework of the appliance.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.