CVE-2019-1708
Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service Vulnerability
Severity Score
8.6
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to the incorrect processing of certain MOBIKE packets. An attacker could exploit this vulnerability by sending crafted MOBIKE packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. The MOBIKE feature is supported only for IPv4 addresses.
Una vulnerabilidad en la característica del Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) (Cisco Mobility) para el programa ASA (Cisco Adaptive Security Appliance) y el programa Cisco Firepower Threat Defense (FTD) podría permitir que un atacante remoto no autenticado provoque una pérdida de memoria o recarga de un dispositivo afectado que lleva a una condición de denegación de servicio (DoS). La vulnerabilidad se debe al procesamiento inapropiado de ciertos paquetes MOBIKE. Un atacante podría explotar esta vulnerabilidad enviando paquetes MOBIKE creados a un dispositivo afectado para procesarlos. Una explotación con éxito podría hacer que un dispositivo afectado consumiera memoria continuamente y finalmente se recargara, resultando en una condición DoS. La función MOBIKE solo es compatible con direcciones IPv4.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-12-06 CVE Reserved
- 2019-05-03 CVE Published
- 2024-09-23 EPSS Updated
- 2024-11-19 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-401: Missing Release of Memory after Effective Lifetime
- CWE-404: Improper Resource Shutdown or Release
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/108166 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.2.2 <= 6.2.3.12 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.2.2 <= 6.2.3.12" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5506-x Search vendor "Cisco" for product "Asa-5506-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.2.2 <= 6.2.3.12 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.2.2 <= 6.2.3.12" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5525-x Search vendor "Cisco" for product "Asa-5525-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.2.2 <= 6.2.3.12 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.2.2 <= 6.2.3.12" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5555-x Search vendor "Cisco" for product "Asa-5555-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.2.2 <= 6.2.3.12 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.2.2 <= 6.2.3.12" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506h-x Search vendor "Cisco" for product "Asa 5506h-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.2.2 <= 6.2.3.12 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.2.2 <= 6.2.3.12" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506w-x Search vendor "Cisco" for product "Asa 5506w-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.2.2 <= 6.2.3.12 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.2.2 <= 6.2.3.12" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5508-x Search vendor "Cisco" for product "Asa 5508-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.2.2 <= 6.2.3.12 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.2.2 <= 6.2.3.12" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5516-x Search vendor "Cisco" for product "Asa 5516-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.2.2 <= 6.2.3.12 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.2.2 <= 6.2.3.12" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5545-x Search vendor "Cisco" for product "Asa 5545-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.3.0 <= 6.3.0.3 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.3.0 <= 6.3.0.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5506-x Search vendor "Cisco" for product "Asa-5506-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.3.0 <= 6.3.0.3 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.3.0 <= 6.3.0.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5525-x Search vendor "Cisco" for product "Asa-5525-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.3.0 <= 6.3.0.3 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.3.0 <= 6.3.0.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5555-x Search vendor "Cisco" for product "Asa-5555-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.3.0 <= 6.3.0.3 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.3.0 <= 6.3.0.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506h-x Search vendor "Cisco" for product "Asa 5506h-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.3.0 <= 6.3.0.3 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.3.0 <= 6.3.0.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506w-x Search vendor "Cisco" for product "Asa 5506w-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.3.0 <= 6.3.0.3 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.3.0 <= 6.3.0.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5508-x Search vendor "Cisco" for product "Asa 5508-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.3.0 <= 6.3.0.3 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.3.0 <= 6.3.0.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5516-x Search vendor "Cisco" for product "Asa 5516-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | >= 6.3.0 <= 6.3.0.3 Search vendor "Cisco" for product "Firepower Threat Defense" and version " >= 6.3.0 <= 6.3.0.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5545-x Search vendor "Cisco" for product "Asa 5545-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.8 <= 9.8.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.8 <= 9.8.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5506-x Search vendor "Cisco" for product "Asa-5506-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.8 <= 9.8.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.8 <= 9.8.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5525-x Search vendor "Cisco" for product "Asa-5525-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.8 <= 9.8.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.8 <= 9.8.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5555-x Search vendor "Cisco" for product "Asa-5555-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.8 <= 9.8.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.8 <= 9.8.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506h-x Search vendor "Cisco" for product "Asa 5506h-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.8 <= 9.8.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.8 <= 9.8.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506w-x Search vendor "Cisco" for product "Asa 5506w-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.8 <= 9.8.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.8 <= 9.8.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5508-x Search vendor "Cisco" for product "Asa 5508-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.8 <= 9.8.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.8 <= 9.8.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5516-x Search vendor "Cisco" for product "Asa 5516-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.8 <= 9.8.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.8 <= 9.8.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5545-x Search vendor "Cisco" for product "Asa 5545-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.9 <= 9.9.2.50 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.9 <= 9.9.2.50" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5506-x Search vendor "Cisco" for product "Asa-5506-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.9 <= 9.9.2.50 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.9 <= 9.9.2.50" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5525-x Search vendor "Cisco" for product "Asa-5525-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.9 <= 9.9.2.50 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.9 <= 9.9.2.50" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5555-x Search vendor "Cisco" for product "Asa-5555-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.9 <= 9.9.2.50 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.9 <= 9.9.2.50" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506h-x Search vendor "Cisco" for product "Asa 5506h-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.9 <= 9.9.2.50 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.9 <= 9.9.2.50" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506w-x Search vendor "Cisco" for product "Asa 5506w-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.9 <= 9.9.2.50 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.9 <= 9.9.2.50" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5508-x Search vendor "Cisco" for product "Asa 5508-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.9 <= 9.9.2.50 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.9 <= 9.9.2.50" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5516-x Search vendor "Cisco" for product "Asa 5516-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.9 <= 9.9.2.50 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.9 <= 9.9.2.50" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5545-x Search vendor "Cisco" for product "Asa 5545-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.10 <= 9.10.1.17 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.10 <= 9.10.1.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5506-x Search vendor "Cisco" for product "Asa-5506-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.10 <= 9.10.1.17 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.10 <= 9.10.1.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5525-x Search vendor "Cisco" for product "Asa-5525-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.10 <= 9.10.1.17 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.10 <= 9.10.1.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa-5555-x Search vendor "Cisco" for product "Asa-5555-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.10 <= 9.10.1.17 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.10 <= 9.10.1.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506h-x Search vendor "Cisco" for product "Asa 5506h-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.10 <= 9.10.1.17 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.10 <= 9.10.1.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5506w-x Search vendor "Cisco" for product "Asa 5506w-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.10 <= 9.10.1.17 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.10 <= 9.10.1.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5508-x Search vendor "Cisco" for product "Asa 5508-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.10 <= 9.10.1.17 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.10 <= 9.10.1.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5516-x Search vendor "Cisco" for product "Asa 5516-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | >= 9.10 <= 9.10.1.17 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version " >= 9.10 <= 9.10.1.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asa 5545-x Search vendor "Cisco" for product "Asa 5545-x" | - | - |
Safe
|