ASA patch for the Akira ransomware attack?

[Chess Norris]

Hello,

There has been quite a lot of attacks related to the Akira Ransomware, where the attackers are using a vulnerability in Cisco RA VPN. https://www.truesec.com/hub/blog/a-victim-of-akira-ransomware 

I can see that Cisco have patched the CVE-2023-20269 vulnerability in  FTD version 7.0.6.1-3  and  7.2.5.1 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC 

But there is no mention about an ASA patch. Does anyone know if it's been released or if we need to apply the workarounds instead?

Thanks

/Chess

[Rob Ingram · Accepted solution]

@Chess Norris run the software checker on that link, ensure you put your ASA version in and it will tell you which version it was fixed in (if affected).

[Chess Norris]

Thanks Rob, I did run the software checker, but it came up empty. Anyway, good to know that there is a patch for this.

Thanks

/Chess