Covered by 2 outlets — first reported by SecurityWeek, Oct 29, 09:47 UTC
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
Summary
Cisco has released security updates for a flaw in the Remote Access SSL VPN service of its ASA and FTD firewall software that attackers are exploiting as a zero-day (a flaw exploited before a fix existed). SecurityWeek says it lets unauthenticated attackers remotely force the firewalls to reload. BleepingComputer describes it as a denial-of-service bug used to crash vulnerable devices, and SecurityWeek calls it the second Cisco firewall VPN zero-day exploited since August.
AI summary by the SecurityTabs newsroom, checked against SecurityWeek, BleepingComputer. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
SecurityWeekFirst report
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
An exploited flaw in the Remote Access SSL VPN service lets unauthenticated attackers remotely force ASA and FTD firewalls to reload.
BleepingComputer
New Cisco firewall zero-day exploited to crash SSL VPN devices
Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that attackers are exploiting to remotely crash vulnerable firewall devices.
Explained
The technology and terms in this story. Learn more
- TechnologyVPN · Virtual private networkAn encrypted tunnel that puts a remote device on a private network, as if it were plugged in at the office.
- ConceptZero-dayA flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
- ProtocolSSL · Secure Sockets LayerThe retired predecessor of TLS; the name lives on in product names such as OpenSSL and "SSL VPN".
- AttackDDoS · Distributed denial of serviceFlooding a service with traffic from many machines until it can't respond.
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.