Collaborate Disseminate
The majority of the bugs in Cisco’s Firepower Threat Defense (FTD) and Adaptive Security Appliance (ASA) software can enable denial of service (DoS) on affected devices. Continue reading Cisco Warns of Severe DoS Flaws in Network Security Software
A high severity zero-day flaw exists in Cisco System’s SIP inspection engine. Continue reading Cisco Security Appliance Zero-Day Found Actively Exploited in the Wild
Cisco Adaptive Security Appliance(ASA)software and Cisco Firepower Threat Defense(FTD)software fails to properly parse SIP traffic,which can result in a denial-of-service condition on affected devices. Continue reading VU#339704: Cisco ASA and FTD SIP Inspection denial-of-service vulnerability
Cisco has issued patches for the vulnerability, which could be up to seven years old. Continue reading Cisco Confirms Critical Firewall Software Bug Is Under Attack
Intel continues to release CPU microcode updates that include mitigation for the Spectre vulnerability announced in January. This week the company released fixes for several CPUs on the Skylake platform. The company’s first batch of microcode upd… Continue reading Intel Releases Microcode Spectre Patches for Skylake CPUs
Cisco Systems released a patch Monday to fix a critical security vulnerability, with a CVSS rating of 10, in its Secure Sockets Layer VPN solution called Adaptive Security Appliance. Continue reading Cisco Patches Critical VPN Vulnerability
Cisco announced Monday a critical vulnerability in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) that allows an unauthenticated, remote attacker to execute code or cause a system reload. This flaw, a perfect 10.0 on Common Vulnerability Scoring System, tops out as the highest warning possible. The products a popular group of security devices designed to protect corporate networks and data centers. Users are urged to apply security updates that fix the issue. “The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device,” Cisco explained in the Monday announcement. “An attacker could exploit this vulnerability by sending multiple, crafted XML packets to a webvpn-configured interface on the affected system. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system, or cause a reload of the affected device.” The vulnerability was found by Cedric […]
The post Cisco patches a perfect 10.0 ‘critical’ flaw in its popular security appliance appeared first on Cyberscoop.
Continue reading Cisco patches a perfect 10.0 ‘critical’ flaw in its popular security appliance
With only a small amount of work, ExtraBacon will commandeer new versions of ASA. Continue reading NSA-linked Cisco exploit poses bigger threat than previously thought
Exploit against Cisco’s PIX line of firewalls remotely extracted crypto keys. Continue reading How the NSA snooped on encrypted Internet traffic for a decade