CVE-2018-15454

Medium

Elevated severity or exploit probability.

CVSS base

8.6 HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS — probability of exploitation (30 days)

4.4%

90.8th percentile

CISA KEV

Not listed

Weakness / dates

CWE-20

Published 2018-11-01 · modified 2026-08-11

CVSS breakdown

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Attack Vector	N	Network
Attack Complexity	L	Low
Privileges Required	N	None
User Interaction	N	None
Scope	C	Changed
Confidentiality	N	None
Integrity	N	None
Availability	H	High

Timeline

2018-11-01 — Published (NVD)
2026-08-11 — Last modified (NVD)

Description

A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of SIP traffic. An attacker could exploit this vulnerability by sending SIP requests designed to specifically trigger this issue at a high rate across an affected device. Software updates that address this vulnerability are not yet available.

Affected

cisco

References

Official: NVD · CVE.org