Cisco Adaptive Security Device Manager Remote Code Execution VULN

[kyojuro112]

Our Cisco ASA Devices (ASA 5515 Security Plus)
have been flagged for CVE-2021-1585 bug with high priority. I could not yet find any sources to resolve this issue.

Anyone here know how to fix? 

The CVE literally says no workaround for this. 

Below is the info that we have for our ASA. 

ASA 5515 Security Plus
Cisco Adaptive Security Appliance Software Version 9.9(2)
Firepower Extensible Operating System Version 2.3(1.84)

ASDM Version: 7.9(2)
ASA Version: 9.9(2)

Encryption: 3DES-AES

[Leo Laohoo · Accepted solution]

This is the Security Bulletin:  Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability

There is no workaround available. 
The only fix is to upgrade the affected firmware.