topic Re: Cisco ASA vulnerable in Network Security

Cisco ASA vulnerable

Cisco SE — Sun, 28 Apr 2024 14:58:58 GMT

Hi, im running a Cisco ASA 5505 with 9.1(2) with Anyconnect enabled. I read that there are some vulnerabilities on this device. Am i affected or any recommendations on what i should do?

Re: Cisco ASA vulnerable

MHM Cisco World — Sun, 28 Apr 2024 15:08:55 GMT

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221806-password-spray-attacks-impacting-custome.html

check this

MHM

Re: Cisco ASA vulnerable

Leo Laohoo — Mon, 29 Apr 2024 01:19:46 GMT

Cisco Event Response: Attacks Against Cisco Firewall Platforms

1. Cisco Adaptive Security Appliance and Firepower Threat Defense Software Web Services Denial of Service Vulnerability

2. Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability

#1 & #2 are currently being actively exploited in the wild.

Exploitation and Public Announcements

Cisco has confirmed that this vulnerability has been exploited. Cisco strongly recommends that customers upgrade to fixed software to resolve this vulnerability. Customers are also strongly encouraged to monitor system logs for indicators of undocumented configuration changes, unscheduled reboots, and any anomalous credential activity.

Re: Cisco ASA vulnerable

Marius Gunnerud — Mon, 29 Apr 2024 09:11:27 GMT

There really is not much you can do with that hardware. The last supported version for ASA5505 is 7.0.4. To protect yourself against the recent vulnerabilities you would need to upgrade your hardware and then install the latest fixed version of ASA or FTD (depending on which you go for.)

Re: Cisco ASA vulnerable

Jerome BERTHIER — Thu, 02 May 2024 09:28:21 GMT

Seriously ?

There is so much CVE issue applicable to such an old ASA version ! It is a crazy situation.

I don't know what you expect to protect with that but if it is exposed to Internet, I guess it might be already compromised. As @Marius Gunnerud said, just upgrade to a supported hardware and a supported code.

Good luck.