Cisco patches actively exploited ASA/FTD firewall vulnerability

mood · Jul 24, 2020

Cisco patches actively exploited ASA/FTD firewall vulnerability
July 24, 2020
https://securityaffairs.co/wordpress/106313/hacking/cisco-cve-2020-3452-flaw.html

Cisco fixed a high severity and actively exploited read-only path traversal vulnerability affecting the web services interface of two of its firewall products.

If successfully exploited, the security vulnerability tracked as CVE-2020-3452 may allow unauthenticated attackers to read sensitive files on unpatched systems through directory traversal attacks.
The impacted products are Cisco Adaptive Security Appliance (ASA) Software — the OS for standalone appliances, blades, and virtual appliance Cisco ASA devices used to protect data centers and corporate networks — and the Cisco Firepower Threat Defense (FTD) Software — a unified software providing next-gen firewall services.
Click to expand...

Successful exploitation could allow remote attackers to read arbitrary files on the targeted devices, stored within the web services file system that is only enabled when the impacted devices are configured with either AnyConnect or WebVPN features.

"The web services files that the attacker can view may have information such as WebVPN configuration, bookmarks, web cookies, partial web content, and HTTP URLs," Cisco said.
Active exploitation already started, only 10% patched
One day after Cisco published the CVE-2020-3452 security advisory, the company had to update it to include information on available public exploit code (a public proof-of-concept unauthenticated file read exploit and an NMAP script).
Click to expand...

"[O]nly 27 of the 398 detected in Fortune 500 companies appear to have been patched/rebooted," Rapid7 also found.
Click to expand...

mood · Jul 24, 2020

Cisco Releases Security Updates for ASA and FTD Software
July 23, 2020
https://us-cert.cisa.gov/ncas/curre...eleases-security-updates-asa-and-ftd-software

Cisco has released security updates to address a vulnerability in Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software Web Service. A remote attacker could exploit this vulnerability to obtain sensitive information.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Cisco Security Advisory cisco-sa-asaftd-ro-path-KJuQhB86 for more information and apply the necessary updates.
Click to expand...

Log in or Sign up

Cisco patches actively exploited ASA/FTD firewall vulnerability

mood Updates Team

mood Updates Team

Log in or Sign up

Cisco patches actively exploited ASA/FTD firewall vulnerability

mood Updates Team

mood Updates Team

Useful Searches