CVE Watch—

CVE-2018-0296

Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

CVSS

—

No CVSS

EPSS

99.9%

p100

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

99.9%EPSS · 30 days99.9%

2026-06-302026-07-16

KEV catalog record

Product

Cisco / Adaptive Security Appliance (ASA)

Vulnerability

Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an attacker to cause a denial-of-service (DoS) condition or information disclosure.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-0296

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2016-6366—

99.7%

KEV—80Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability—CVE-2016-6367—

97.5%

KEV—79Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability—CVE-2014-2120—

96.1%

KEV—79Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability—