5.5
CVE-2018-0373
- EPSS 0.08%
- Veröffentlicht 21.06.2018 11:29:01
- Zuletzt bearbeitet 21.11.2024 03:38:05
- Quelle psirt@cisco.com
- Teams Watchlist Login
- Unerledigt Login
A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect Secure Mobility Client for Windows Desktop could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a malicious request to the application. A successful exploit could allow the attacker to cause a DoS condition on the affected system. Cisco Bug IDs: CSCvj47654.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Anyconnect Secure Mobility Client Version4.5(58)
Cisco ≫ Anyconnect Secure Mobility Client Version4.5(1044)
Cisco ≫ Anyconnect Secure Mobility Client Version4.5(2033)
Cisco ≫ Anyconnect Secure Mobility Client Version4.5(2036)
Cisco ≫ Anyconnect Secure Mobility Client Version4.5(3040)
Cisco ≫ Anyconnect Secure Mobility Client Version4.5(4029)
Cisco ≫ Anyconnect Secure Mobility Client Version4.5(5030)
Cisco ≫ Anyconnect Secure Mobility Client Version4.6(362)
Cisco ≫ Anyconnect Secure Mobility Client Version4.6(1098)
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.231 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.