A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service
A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow for denial of service (DoS). Cisco Secure Firewall ASA and FTD provide firewall, VPN, and threat defense capabilities for enterprise environments. An attacker could exploit this vulnerability by sending a specially crafted request when connecting to a vulnerable SSL remote access VPN service that has secondary authentication configured on a tunnel group. Successful exploitation could cause the affected device to reload unexpectedly, resulting in a DoS condition and interruption of remote access services. Cisco has rel
Read at CIS / MS-ISAC Cybersecurity Advisories
- Vendor
- Cisco
- Product
- ASA, Firepower / FTD
- Fix
- available
- Exposure class
- Edge / VPN / firewall
Why it ranks 38 (Notable)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Cisco)
- Fix available
- CERT coordination
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CIS / MS-ISAC Cybersecurity Advisories (cisecurity.org)