CSCvg35618 - Cisco Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability - 4

[simon.richards]

Hi,

If the webvpn feature is enabled globally, but not applied to an interface, is the device still vulnerable?

Thanks

Simon

[Leo Laohoo]

If webvpn is disabled, device is not vulnerable.

According to the security advisory (HERE), there is no workaround.  Disabling the webvpn function will still leave the device vulnerable unless the fix version is loaded.