Summary
Ein Angreifer kann mehrere Schwachstellen in Cisco ASA (Adaptive Security Appliance) und Cisco Firepower ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder beliebigen Code mit den Rechten des Systems auszuführen.
Product
Die Cisco ASA Appliance bietet Funktionen zur Sicherung von Anwendungssoftware, wie beispielsweise Firewall oder VPN.
Firepower ist eine Firewall-Plattform von Cisco
Vulnerabilities 3
-
High 8.6
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fi…
KEV Apr 24, 2024 -
Medium 6.0
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been av…
KEV Apr 24, 2024 -
Medium 6.0
A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Sof…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory vom 2024-04-24
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm
-
Cisco Security Advisory vom 2024-04-24
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h
-
Cisco Security Advisory vom 2024-04-24
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2
-
Cisco Talos Article vom 2024-04-24
https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/
-
Cisco Event Response vom 2024-04-24
https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_attacks_event_response