UpHeron
All vulnerabilities

Servers and applications

CVE-2018-0228

A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the CPU to increase upwards of 100% utilization, causing a denial of service (DoS) condition on an affected system. The vulnerability is due to incorrect handling of an internal software lock that could prevent other system processes from…

Severity
High 8.6
Published
19 Apr 2018
Last changed
11 Aug 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.2.4.27, 9.9.1
Exploit chance
3.5% in the next 30 daysHigher than 89% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • From 9.2 before 9.2.4.27
  • From 9.9 before 9.9.1
  • Version 98.1(12.187)

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-0228
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-0228