VDB
CNVD-2018-11320
CNVD-2018-11320
PUBLISHED
Cisco 3000 Series Industrial Security Appliance（ISA）等都是美国思科（Cisco）公司的安全设备。ASA Software和Firepower Threat Defense (FTD) Software都是分别运行在不同设备中的操作系统。 多款Cisco产品中的ASA Software和FTD Software的Web界面存在输入验证漏洞，该漏洞源于程序缺少对HTTP URL的正确验证。远程攻击者可通过向受影响设备发送特制的HTTP请求利用该漏洞造成拒绝服务或造成信息泄露。
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches和Cisco 7600 Series Routers | ||
| Cisco 3000 Series Industrial Security Appliance (ISA) | ||
| cnvd | Cisco ASA 5500-X Series Next-Generation Firewalls | |
| Cisco ASA 5500-X Series Next-Generation Firewalls | ||
| cnvd | Cisco ASA 1000V Cloud Firewall | |
| cnvd | Cisco Firepower 4100 Series Security Appliances | |
| Cisco Firepower 2100 Series Security Appliance | ||
| cnvd | Cisco ASA 5500 Series Adaptive Security Appliances | |
| cnvd | Cisco 3000 Series Industrial Security Appliance (ISA) | |
| Cisco Firepower 9300 ASA Security Module | ||
| cnvd | Cisco FTD Virtual (FTDv) | |
| Cisco Adaptive Security Virtual Appliance (ASAv) | ||
| Cisco Firepower 4100 Series Security Appliances | ||
| Cisco ASA 1000V Cloud Firewall | ||
| Cisco ASA 5500 Series Adaptive Security Appliances | ||
| Cisco FTD Virtual (FTDv) | ||
| cnvd | Cisco Firepower 9300 ASA Security Module | |
| cnvd | Cisco Adaptive Security Virtual Appliance (ASAv) | |
| cnvd | Cisco Firepower 2100 Series Security Appliance | |
| cnvd | Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches和Cisco 7600 Series Routers |
Timeline
- Jun 7, 2018 CVE ID Reserved
- Jun 7, 2018 CVE Updated
- Jun 12, 2018 CVE Published