Nessus scan on ASA shows issue CVE-2018-0101 - Is it a false positve?

[Loc Nguyen]

Hi,

We have a computer runs Nessus and scan our ASA.

It shows that our ASA is under the issue CVE-2018-0101

My ASA IOS is asa9-16-2-14-lfbff-k8.SPA which is released in year 2021. It should fixed the bug in 2018 of the issue I think.

It is not in the list of effected IOS for the issue as below:

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1

Should I worry about this scan or just ignore it?

Thank you

Loc

[marce1000]

 - Usually best approach is to check and or upgrade to the latest advisory release for the particular ASA model , and check if that can help (run the scan again). The question 'should I worry' depends on 'business security interest'  , a bank for instance may want to resolve all security reports immediately  , 

 M.