Collaborate Disseminate
Cisco Adaptive Security Appliance(ASA)software and Cisco Firepower Threat Defense(FTD)software fails to properly parse SIP traffic,which can result in a denial-of-service condition on affected devices. Continue reading VU#339704: Cisco ASA and FTD SIP Inspection denial-of-service vulnerability
The vulnerability has a CVSS base score of 10.0, the highest possible, and now affects 15 products. Continue reading Cisco Issues New Patches for Critical Firewall Software Vulnerability
The “perfect 10.0” critical vulnerability Cisco announced last week that impacts its Adaptive Security Appliance (ASA) devices has additional attack vectors and affects various features. A company investigation revealed the original security patch did not identify or fix the entire problem, so a new fix for Cisco ASA platforms is now available. This means Cisco customers will have additional downtime for security maintenance in order to fix a bug that allows an unauthenticated, remote attacker to execute code and cause system reloads. The problem is raising small hell on social media from systems and network administrators about additional downtime. Heads up: Cisco just updated the advisory on CVE-2018-0101 (ASA webvpn / AnyConnect RCE) with a newer software release to fix additional exploitation vectors not covered in last week’s patch. https://t.co/onwRSoXAla — David Longenecker (@dnlongen) February 5, 2018 For a whole week I have been patching ASAs with CVE-2018-0101. Today Cisco reports that the patches are not […]
The post Cisco investigation reveals ASA vulnerability is worse than originally thought appeared first on Cyberscoop.
Continue reading Cisco investigation reveals ASA vulnerability is worse than originally thought
With only a small amount of work, ExtraBacon will commandeer new versions of ASA. Continue reading NSA-linked Cisco exploit poses bigger threat than previously thought
Exploit against Cisco’s PIX line of firewalls remotely extracted crypto keys. Continue reading How the NSA snooped on encrypted Internet traffic for a decade
Cisco Adaptive Security Appliance(ASA)Internet Key Exchange versions 1 and 2(IKEv1 and IKEv2)contains a buffer overflow vulnerability that may be leveraged to gain remote code execution. Continue reading VU#327976: Cisco Adaptive Security Appliance (ASA) IKEv1 and IKEv2 contains a buffer overflow vulnerability