Cisco ASA Devices — Vulnerability Impact and Upgrade Clarification

[saba53]

Hello,

We have seen that Cisco devices are affected by the vulnerability described here: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvp…

and here: https://thehackernews.com/2025/09/urgent-cisco-asa-zero-day-duo-under.html

In our infrastructure we are using the following devices:

• Cisco ASA 5585-SSP-60 — ASA Version: 9.12(4)7
• Cisco ASA 5555 — ASA Version: 9.14(4)23

We would like to know whether our Cisco devices are affected by this vulnerability and what is required to mitigate it.

If a version upgrade is required, please specify to which version we can or should upgrade, or whether it is possible at all to upgrade these devices to the necessary version(s).

Additionally, we are interested in what kinds of changes occur if we upgrade to ASA Version 9.16. For example, is it possible that algorithms such as MD5, DH2, and similar ciphers would be removed and that we would be forced to replace them with other algorithms?

Please help us with this matter,
Thank you in advance.

[Marvin Rhoads · Accepted solution]

Both of those models are well past their last date of support and thus patches are not available for them.

End of software maintenance for the ASA 5555-X was September 2021; but Cisco did release a few interim updates after that date - the last one was in April 2024 though. (End of Sales was September 2020 for the 5555-X)

The 5585-X was end of support even earlier - the original announcement is aged out of the Cisco listing!

[saba53]

Thanks so much for your help!