Cisco: hackers are attacking ASA and Firepower 0-day and there’s no patch

guest · Nov 1, 2018

Cisco: hackers are attacking ASA and Firepower 0-day and there’s no patch
November 01, 2018
https://www.cso.com.au/article/649039/cisco-hackers-attacking-asa-firepower-0-day-there-no-patch/

Cisco has released a warning over a bug in devices running its Adaptive Security Appliance and Firepower software that hackers are actively exploiting and there’s no update that address the flaw.

The company posted an advisory today to warn customers of a denial of service vulnerability affecting several appliances that can be remotely exploited by an unauthenticated attacker.

“An attacker could exploit this vulnerability by sending SIP requests designed to specifically trigger this issue at a high rate across an affected device,” Cisco notes.

Given that organizations rely on ASA and Firepower appliances to provide firewall defenses that protect core business applications, admins will likely be keen to follow Cisco’s mitigations until a patch is ready.
Click to expand...

guest · Dec 20, 2019

Hackers Continue to Exploit Cisco ASA Vulnerability Patched Last Year
December 20, 2019
https://www.securityweek.com/hackers-continue-exploit-cisco-asa-vulnerability-patched-last-year

The vulnerability, tracked as CVE-2018-0296, allows a remote, unauthenticated attacker to gain access to sensitive information through directory traversal techniques. It can also be exploited for denial-of-service (DoS) attacks.

The security hole was patched in early June 2018 and the first DoS attacks were spotted only a few weeks later. Several proof-of-concept (PoC) exploits have been made publicly available.
Cisco initially classified the vulnerability as high severity, but recently changed its rating to critical after learning of more attacks.

“This isn't a new vulnerability, but as exploitation continues to increase, customers need to be aware of the risk of both a denial-of-service or unauthenticated information disclosure. Additionally, as we head into the holidays, people take time off, but adversaries do not,” Cisco Talos said.
Click to expand...

Cisco Talos: Cisco ASA DoS bug attacked in wild

Log in or Sign up

Cisco: hackers are attacking ASA and Firepower 0-day and there’s no patch

guest Guest

guest Guest

Log in or Sign up

Cisco: hackers are attacking ASA and Firepower 0-day and there’s no patch

guest Guest

guest Guest

Useful Searches