UpHeron
All vulnerabilities

Servers and applications

CVE-2018-0227

A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to establish an SSL VPN connection and bypass certain SSL certificate verification steps. The vulnerability is due to incorrect verification of the SSL Client Certificate. An attacker…

Severity
High 7.5
Published
19 Apr 2018
Last changed
11 Aug 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2.1% in the next 30 daysHigher than 81% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • From 9.6.3 up to 9.6.3.17
  • From 9.6.2.9 up to 9.6.2.21
  • From 9.5.3.7 up to 9.5.3.9
  • Version 9.5.2.8
All 8 release lines
  • Version 9.4.3.1
  • Version 9.4.3.2
  • From 9.4.4 up to 9.4.4.13
  • Version 9.5.2.7
  • Version 9.5.2.8
  • From 9.5.3.7 up to 9.5.3.9
  • From 9.6.2.9 up to 9.6.2.21
  • From 9.6.3 up to 9.6.3.17

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-0227
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-0227