Cisco ASA and FTD SSL VPN flaw can remotely reload devices
Original title: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Unauthenticated attackers can crash devices when secondary authentication is set on a tunnel group; Cisco has shipped updates.
Cisco says a logic error in the Remote Access SSL VPN service of Secure Firewall ASA and Secure Firewall Threat Defense can let an unauthenticated remote attacker reload the device. The attacker sends a crafted connection request when secondary authentication is configured on a tunnel group. A successful exploit causes a denial of service. Cisco has released software updates; affected and fixed versions are not in the snippet.
Unconfirmed: The snippet does not name a CVE, affected versions, or whether attacks are occurring.
- The bug is in Remote Access SSL VPN on ASA and FTD.
- It requires secondary authentication on a tunnel group.
- Impact is an unexpected device reload, not code execution.
- Cisco says software updates are available.
Impact: Unauthenticated remote denial of service via device reload
| Product | Affected |
|---|---|
| Cisco Secure Firewall Adaptive Security Appliance Software | — |
| Cisco Secure Firewall Threat Defense Software | — |
- 1.Install the ASA and FTD software updates Cisco has released.
- Vendors
- Cisco
From the original article
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
sec.cloudapps.cisco.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.