cisco-sa-20180129-asa1 vulnerability

[PaulPatterson99634]

I have received the results of a PCI Pen Test that was ran against the network, and I am seeing a flag for the CVE-2018-0101 vulnerability for the ASAs. I am currently running ASA version 9.12(4)13/ASDM 7.13. I thought that this was resolved by Cisco back on the 9.9 versions. Does anyone know why I would be receiving the flag on this version and how do I fix it? 

Thanks,

Paul

[Marvin Rhoads · Accepted solution]

It could be a false positive from the scanning software. Another user reported a similar problem here just a couple of weeks ago. I'd start with challenging the scanning vendor by documenting what you just posted here.

[Victor To]

Check this out.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1#fixed

This article provides fixed releases and CLI to check your config if it's vulnerable.