Cisco 3000 Series Industrial Security Appliance和Firepower Threat Defense Software 输入验证漏洞

CNNVD-ID编号	CNNVD-201810-1569	CVE编号	CVE-2018-15454
发布时间	2018-11-02	更新时间	2019-10-17
漏洞类型	输入验证错误	漏洞来源	The Cisco Product Security Incident Response Team (PSIRT) has become aware of active exploitation of the vulnerability that is described in this advisory.
危险等级	高危	威胁类型	远程
厂商	N/A

漏洞介绍

Cisco 3000 Series Industrial Security Appliance（ISA）等都是美国思科（Cisco）公司不同系列的安全设备。Adaptive Security Appliance（ASA）Software和Firepower Threat Defense（FTD）Software都是使用在其中的操作系统。

Cisco ASA Software 9.4及之后版本和FTD Software 6.0及之后版本中的Session Initiation Protocol (SIP)检测引擎存在拒绝服务漏洞。远程攻击者可利用该漏洞造成拒绝服务。以下产品受到影响：Cisco 3000 Series Industrial Security Appliance (ISA)；ASA 5500-X Series Next-Generation Firewalls；ASA Services Module（用于Cisco Catalyst 6500 Series Switches和Cisco 7600 Series Routers）；Adaptive Security Virtual Appliance (ASAv)；Firepower 2100 Series Security Appliance；Firepower 4100 Series Security Appliance；Firepower 9300 ASA Security Module；FTD Virtual (FTDv)。