CVE-2018-15454
HighCVSS 8.6Exploitation Probability (EPSS)
Very high risk90th percentile - higher than 90% of all known CVEs
Summary
A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of SIP traffic. An attacker could exploit this vulnerability by sending SIP requests designed to trigger this issue at a high rate. Software updates addressing this vulnerability are not yet available.
Risk Assessment
The risk includes the possibility of device disruption or performance degradation, leading to service unavailability. The attack does not require authentication, increasing the risk of remote attack.
Recommendation
Since updates are not yet available, it is recommended to monitor devices for unusual SIP traffic and limit exposure to untrusted networks. Follow vendor announcements and apply patches as soon as they are released.
Original NVD description (English source)
A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of SIP traffic. An attacker could exploit this vulnerability by sending SIP requests designed to specifically trigger this issue at a high rate across an affected device. Software updates that address this vulnerability are not yet available.