CVE-2018-15383

Estado: ModificadaAlta (7.5)—

A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a temporary denial of service (DoS) condition. The vulnerability exists because the affected devices have a limited amount of Direct Memory Access (DMA) memory and the affected software improperly handles resources in low-memory conditions.

Leer descripción completaMostrar menos

An attacker could exploit this vulnerability by sending a sustained, high rate of malicious traffic to an affected device to exhaust memory on the device. A successful exploit could allow the attacker to exhaust DMA memory on the affected device, which could cause the device to reload and result in a temporary DoS condition.

CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Puntuación base: 7.5

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 2.49%
Percentil entre todas las CVEs puntuadas: 84
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Cisco — Adaptive Security Appliance Software Cisco — Firepower Threat Defense Cisco — Secure Firewall Threat Defense

CWE

CWE-400
CWE-770

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2018-15383",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2018-15383",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-25T18:53:03.926244Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco Adaptive Security Appliance (ASA) Software",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-10-05T14:29:07.230",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1041787",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-asa-dma-dos",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1041787",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-asa-dma-dos",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a temporary denial of service (DoS) condition. The vulnerability exists because the affected devices have a limited amount of Direct Memory Access (DMA) memory and the affected software improperly handles resources in low-memory conditions. An attacker could exploit this vulnerability by sending a sustained, high rate of malicious traffic to an affected device to exhaust memory on the device. A successful exploit could allow the attacker to exhaust DMA memory on the affected device, which could cause the device to reload and result in a temporary DoS condition."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el controlador del acelerador de hardware criptográfico de Cisco Adaptive Security Appliance (ASA) Software y Cisco Firepower Threat Defense (FTD) Software podría permitir que un atacante remoto no autenticado provoque que un dispositivo afectado se recargue, lo que resulta en una denegación de servicio (DoS) temporal. La vulnerabilidad existe debido a que los dispositivos afectados tienen una cantidad limitada de memoria Direct Memory Access (DMA) y el software afectado gestiona incorrectamente los recursos en condiciones de poca memoria. Un atacante podría explotar esta vulnerabilidad enviando continuamente un gran volumen de tráfico a un dispositivo afectado para agotar la memoria del dispositivo. Si se explota con éxito, esta vulnerabilidad podría permitir que el atacante agote la memoria DMA en el dispositivo afectado, lo que podría provocar que el dispositivo se recargue y desemboque en una denegación de servicio (DoS) temporal."
    }
  ],
  "lastModified": "2026-08-11T19:33:44.513",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6C12225-4467-4D0B-AB6A-01F4DDFD1728"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB8EEF6B-B143-4079-BE05-C5754317B3EA"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "692CE439-3F58-45F7-8B9D-3D7FDD4F1300"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27BF9FDA-98A4-417A-A823-21424CA183A6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E8F4132-FCC6-4C3E-A7B9-7DDA6F9C0315"
            },
            {
              "criteria": "cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6137351F-96A8-4FE4-9F7C-45A7EFD3925A"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36BA3B77-4350-4E76-BA77-4DDA00D4244A"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B821471B-2911-4BE0-9C1F-B765857BCFD2"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C55D658-3BBF-4815-AEC1-FA0800CB8679"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B95C853-AD3D-4505-B042-41BA55B896D2"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.6\\(43\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C764DCB9-5CA0-4923-B492-CAC16C61CD08"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB39A818-8529-4A6A-9504-74816DA28962"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D09B350-9C53-4004-A1E9-968100B71372"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F19059F1-AC91-417B-A9C9-877D020481D5"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:9.9\\(28\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4244DB42-EDA2-4E63-96C2-D3C1DBFA1838"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}