VDB
CVE-2018-15454
CVE-2018-15454
PUBLISHED
CVSS 7.800000190734863 HIGH
A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of SIP traffic. An attacker could exploit this vulnerability by sending SIP requests designed to specifically trigger this issue at a high rate across an affected device. Software updates that address this vulnerability are not yet available.
EPSS 4.38% · 90.5th percentile
Risk Scores
CVSS 2.0
7.800000190734863
EPSS Score
4.38%
90.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.4 |
| cisco | firepower_threat_defense | 6.2.2, 6.2.0, 6.1.0 |
| cisco | adaptive_security_appliance_software | 9.6, 9.8, 9.9 |
Timeline
- Oct 31, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- Jul 4, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Jan 9, 2023 EPSS Score
- Mar 12, 2023 EPSS Score
- May 14, 2023 EPSS Score
- Jul 8, 2023 EPSS Score
- Sep 7, 2023 EPSS Score