CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-06-07
Cisco ASA and FTD Web Interface Path Traversal and Denial of Service Vulnerability (CVE-2018-0296) Technical Advisory
[Affected Scope] Cisco ASA Software and Cisco FTD Software running on devices with enabled web interfaces (SSL VPN, AnyConnect, Clientless Portal, etc.)
[Impact] Unauthenticated, remote attackers can trigger an unexpected device reload (DoS) or view sensitive system information without authentication via directory traversal
[Mitigation] Apply official software updates from Cisco immediately, restrict web interface access using ACLs, or disable unnecessary HTTP services