Multiple Cisco Products CVE-2018-0472 Denial Of Service Vulnerability

Bugtraq ID:	105418
Class:	Input Validation Error
CVE:	CVE-2018-0472
Remote:	Yes
Local:	No
Published:	Sep 26 2018 12:00AM
Updated:	Apr 05 2019 06:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Rockwell Automation Allen-Bradley Stratix 5950 1783-SAD4T0SPK9 Rockwell Automation Allen-Bradley Stratix 5950 1783-SAD4T0SBK9 Rockwell Automation Allen-Bradley Stratix 5950 1783-SAD2T2SPK9 Rockwell Automation Allen-Bradley Stratix 5950 1783-SAD2T2SBK9 Cisco IOS XE Software 0 Cisco Firepower Threat Defense Software (FTD) 6.2.3 Cisco Firepower Threat Defense Software (FTD) 6.2.2 Cisco Firepower Threat Defense Software (FTD) 6.2.1 Cisco Firepower Threat Defense Software (FTD) 6.2 Cisco ASR 1000 Series Routers 0 Cisco Adaptive Security Appliance (ASA) Software 9.9 Cisco Adaptive Security Appliance (ASA) Software 9.8 Cisco Adaptive Security Appliance (ASA) Software 9.7 Cisco Adaptive Security Appliance (ASA) Software 9.6 Cisco Adaptive Security Appliance (ASA) Software 9.5 Cisco Adaptive Security Appliance (ASA) Software 9.4 Cisco Adaptive Security Appliance (ASA) Software 9.3 Cisco Adaptive Security Appliance (ASA) 5500-X Series 0 Cisco 4000 Series 0
Not Vulnerable:	Cisco Firepower Threat Defense Software (FTD) 6.2.3.1 Cisco Firepower Threat Defense Software (FTD) 6.2.2.3 Cisco Adaptive Security Appliance (ASA) Software 9.9.2.2 Cisco Adaptive Security Appliance (ASA) Software 9.8.2.26 Cisco Adaptive Security Appliance (ASA) Software 9.6.4.8 Cisco Adaptive Security Appliance (ASA) Software 9.4.4.18

Multiple Cisco Products CVE-2018-0472 Denial Of Service Vulnerability

Multiple Cisco Products are prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition; denying service to legitimate users.

This issue is being tracked by Cisco Bug IDs CSCvf73114, CSCvg37952, CSCvh04189, CSCvh04591, and CSCvi30496.

Multiple Cisco Products CVE-2018-0472 Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Multiple Cisco Products CVE-2018-0472 Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Cisco Products CVE-2018-0472 Denial Of Service Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance (Cisco)
  
• ICSA-19-094-04 Rockwell Automation Stratix 5950 (CERT)