CVE Vulnerability Advisory Database

[Affected Scope] Cisco ASA and FTD Software with Remote Access SSL VPN enabled and secondary authentication configured.

[Impact] Unauthenticated remote attackers can trigger an unexpected device reload, leading to a complete Denial of Service (DoS) of VPN services.

[Mitigation] Apply the latest security patches from Cisco immediately; review secondary authentication configurations if patching is delayed.

[Affected Scope] Cisco Secure Firewall ASA and FTD Software with Remote Access SSL VPN service enabled

[Impact] Unauthenticated, remote attackers can cause an unexpected device reload, leading to a complete Denial of Service (DoS) condition

[Mitigation] Immediately upgrade to the patched software versions recommended in the Cisco Security Advisory

[Affected Scope] Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software with Remote Access VPN enabled

[Impact] Unauthenticated remote attackers can bypass authentication to access restricted VPN-related URL endpoints, and active exploit variants can trigger unexpected device reloads, causing a complete Denial of Service (DoS)

[Mitigation] Immediately upgrade to the fixed software releases recommended in the official Cisco Security Advisory

[Affected Scope] Cisco Secure Firewall ASA (Adaptive Security Appliance) and FTD (Threat Defense) software with VPN web server features enabled

[Impact] An authenticated remote attacker with valid VPN credentials can execute arbitrary code with root privileges, leading to complete compromise of the device

[Mitigation] Apply official vendor security patches immediately, enforce Multi-Factor Authentication (MFA) on all VPN accounts, and monitor HTTP traffic logs

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software

[Impact] An authenticated, local attacker with administrator privileges can execute arbitrary code with root-level privileges and establish persistence across device reboots by preloading crafted files

[Mitigation] Apply the official security updates provided by Cisco immediately and audit the flash file system for unauthorized files

[Affected Scope] Cisco ASA and FTD Software with AnyConnect or WebVPN configurations enabled

[Impact] Unauthenticated remote attackers can execute arbitrary script code in the user's browser context, potentially compromising session tokens and sensitive data

[Mitigation] Apply official Cisco software updates immediately and restrict access to the web services interface