CVE-2016-2183 WSA Evaluation

[KENT BRYAN]

Does anyone have information on is this bug affects ASA devices and devices used with Cisco AnyConnect?

[Austin Harsh]

It does and it can be fixed by removing 3des-sha1/DES-CBC3-SHA from your ciphersuite.

[Palani Mohan]

Kent

Is this what you are looking for?

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl

It shows Release Date and Release number that would address the vulnerability for ASAng and Anyconnect clients.

Kind regards ... Palani