Qubicweb reading view
A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service
Internal Read means the full piece stays on Qubicweb, with its source path and context still visible.
Brief points
- A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow...
- Cisco Secure Firewall ASA and FTD provide firewall, VPN, and threat defense capabilities for enterprise environments.
- An attacker could exploit this vulnerability by sending a specially crafted request when connecting to a vulnerable SSL remote access VPN service that has secondary authenticati...
A vulnerability has been discovered in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that could allow for denial of service (DoS). Cisco Secure Firewall ASA and FTD provide firewall, VPN, and threat defense capabilities for enterprise environments. An attacker could exploit this vulnerability by sending a specially crafted request when connecting to a vulnerable SSL remote access VPN service that has secondary authentication configured on a tunnel group.
Successful exploitation could cause the affected device to reload unexpectedly, resulting in a DoS condition and interruption of remote access services. Cisco has released software updates to address this vulnerability, and Cisco states that no workarounds address this vulnerability, though a temporary mitigation is available.