CVE-2018-0240

HIGH

8.6

CVSS Score

Published: April 19, 2018 at 08:00 PM UTC

Updated: August 11, 2026 at 07:33 PM UTC

45 products affected across 1 vendorAdaptive Security ApplianceSecure Firewall Threat DefenseASA 5580

Using Cisco Adaptive Security Appliance by N/A?

Get instant alerts when new vulnerabilities affect Cisco Adaptive Security Appliance - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.6

Exploit prediction

EPSS 4%

SSVC

No known exploit

Description

Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerabilities are due to logical errors during traffic inspection. An attacker could exploit these vulnerabilities by sending a high volume of malicious traffic across an affected device. An exploit could allow the attacker to cause a deadlock condition, resulting in a reload of an affected device. These vulnerabilities affect Cisco ASA Software and Cisco FTD Software configured for Application Layer Protocol Inspection running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4100 Series Security Appliance, Firepower 9300 ASA Security Module, FTD Virtual (FTDv). Cisco Bug IDs: CSCve61540, CSCvh23085, CSCvh95456.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Adaptive Security Appliance · Cisco

95%

9.6.0.0 ≤ v < 9.6.4.69.7.0.0 ≤ v < 9.7.1.249.8.0.0 ≤ v < 9.8.2.249.9.0.0 ≤ v < 9.9.1.4

Affected range stops below 9.6.4.6, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.7.1.24, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.8.2.24, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.9.1.4, so it looks safe — our inference, not a vendor statement

cisco-7604 (environment) · cisco-7606-s (environment) · cisco-7609-s (environment) · cisco-7613-s (environment) · cisco-adaptive-security-virtual-appliance (environment) · cisco-asa-5505 (environment) · cisco-asa-5506-x (environment) · cisco-asa-5506h-x (environment) · cisco-asa-5506w-x (environment) · cisco-asa-5508-x (environment) · cisco-asa-5510 (environment) · cisco-asa-5512-x (environment) · cisco-asa-5515-x (environment) · cisco-asa-5516-x (environment) · cisco-asa-5520 (environment) · cisco-asa-5525-x (environment) · cisco-asa-5540 (environment) · cisco-asa-5545-x (environment) · cisco-asa-5550 (environment) · cisco-asa-5555-x (environment) · cisco-asa-5580 (environment) · cisco-asa-5585-x (environment) · cisco-catalyst-6500-e (environment) · cisco-catalyst-6503-e (environment) · cisco-catalyst-6504-e (environment) · cisco-catalyst-6506-e (environment) · cisco-catalyst-6509-e (environment) · cisco-catalyst-6509-neb-a (environment) · cisco-catalyst-6509-v-e (environment) · cisco-catalyst-6513 (environment) · cisco-catalyst-6513-e (environment) · cisco-firepower-2110 (environment) · cisco-firepower-2120 (environment) · cisco-firepower-2130 (environment) · cisco-firepower-2140 (environment) · cisco-firepower-4110 (environment) · cisco-firepower-4120 (environment) · cisco-firepower-4140 (environment) · cisco-firepower-4150 (environment) · cisco-firepower-9300 (environment) · cisco-firepower-threat-defense-virtual (environment) · cisco-isa-3000-2c2f (environment) · cisco-isa-3000-4c (environment)

Secure Firewall Threat Defense · Cisco

95%

6.1.0 ≤ v ≤ 6.1.0.76.2.0 ≤ v < 6.2.0.56.2.1 ≤ v < 6.2.2.2

7604 · Ciscodevice

80%

All versions

7606-S · Ciscodevice

80%

All versions

7609-S · Ciscodevice

80%

All versions