UpHeron
All vulnerabilities

Servers and applications

CVE-2018-0296

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on certain software releases that the ASA will not reload, but an attacker could view sensitive system information without authentication by…

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 3 Nov 2021.

Severity
High 7.5
Published
7 Jun 2018
Last changed
11 Aug 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.2.4.33, 9.4.4.18, 9.6.4.8, 9.7.1.24, 9.8.2.28, 9.9.2.1
Exploit chance
100% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • From 9.9 before 9.9.2.1
  • From 9.8 before 9.8.2.28
  • From 9.7 before 9.7.1.24
  • From 9.5 before 9.6.4.8
All 7 release lines
  • From 9.1 before 9.1.7.29
  • From 9.2 before 9.2.4.33
  • From 9.3 before 9.4.4.18
  • From 9.5 before 9.6.4.8
  • From 9.7 before 9.7.1.24
  • From 9.8 before 9.8.2.28
  • From 9.9 before 9.9.2.1

Known exploited

CISA name
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
Required action
Apply updates per vendor instructions.
Due for US agencies
3 May 2022
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-0296
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-0296