CVE-2018-15398: Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability
First published: Fri Oct 05 2018(Updated: )
A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control list (ACL) that is configured for an interface of an affected device. The vulnerability is due to errors that could occur when the affected software constructs and applies per-user-override rules. An attacker could exploit this vulnerability by connecting to a network through an affected device that has a vulnerable configuration. A successful exploit could allow the attacker to access resources that are behind the affected device and would typically be protected by the interface ACL.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance Software | =9.6\(4.3\) | |
| Cisco Adaptive Security Appliance Software | =9.4\(2\) | |
| Cisco Adaptive Security Appliance Software | =9.4\(4\) | |
| Cisco Secure Firewall Threat Defense | =6.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-15398?
CVE-2018-15398 is rated as a high severity vulnerability due to its potential to allow unauthorized access.
How do I fix CVE-2018-15398?
To mitigate CVE-2018-15398, users should upgrade their Cisco ASA or FTD software to the latest version recommended by Cisco.
Which Cisco products are affected by CVE-2018-15398?
CVE-2018-15398 affects Cisco Adaptive Security Appliance Software versions 9.4(2), 9.4(4), 9.6(4.3) and Cisco Firepower Threat Defense Software version 6.2.0.
What impact does CVE-2018-15398 have on network security?
CVE-2018-15398 allows attackers to bypass access control lists, potentially compromising network security.
Is authentication required to exploit CVE-2018-15398?
No, CVE-2018-15398 can be exploited by unauthenticated, remote attackers.
- agent/type
- agent/severity
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco adaptive security appliance software
- version/cisco adaptive security appliance software/9.6\(4.3\)
- version/cisco adaptive security appliance software/9.4\(2\)
- version/cisco adaptive security appliance software/9.4\(4\)
- canonical/cisco secure firewall threat defense
- version/cisco secure firewall threat defense/6.2.0