Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability

Cisco Adaptive Security Device Manager (ASDM) is a simple, GUI-based firewall device management application. a remote code execution vulnerability exists in Cisco Adaptive Security Device Manager (ASDM) version 9.16.1 and earlier. The vulnerability stems from a lack of proper signature verification of specific code exchanged between ASDM and Launcher. An attacker could exploit this vulnerability to execute arbitrary code on a user’s operating system by intercepting traffic between Launcher and ASDM and injecting arbitrary code.