EUVD-2016-7384

Malware in sbrugna...

Cisco ASA Web Interface Remote XML Command Injection (cisco-sa-20161116-asa)

According to its self-reported version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by an XML command injection vulnerability in the web-based management interface due to improper validation of user-supplied input. An...

Design/Logic Flaw

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.16.10. Known Fixed Releases:...