Cisco Confirms Critical Firewall Software Bug Is Under Attack

🗓️ 09 Feb 2018 13:06:34Reported by Christopher KanaracusType

threatpost🔗 threatpost.com👁 82 Views

Cisco confirms attack on critical ASA firewall software vulnerabilit

Reporter	Title	Published	Views	Family All 70
zdt	Cisco ASA - Crash PoC Exploit	7 Feb 201800:00	–	zdt
zdt	Cisco RV130W Routers Management Interface Remote Command Execution Exploit	15 Apr 201900:00	–	zdt
zdt	Cisco RV130W 1.0.3.44 - Remote Stack Overflow Exploit	4 Jun 201900:00	–	zdt
zdt	Cisco RV110W / RV130(W) / RV215W Remote Command Execution Exploit	2 Sep 201900:00	–	zdt
GithubExploit	Exploit for CVE-2014-8361	31 Mar 202611:18	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Rv110W_Firmware	29 Nov 202517:54	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Cisco Rv110W_Firmware	2 Sep 202519:23	–	githubexploit
GithubExploit	Exploit for Double Free in Cisco Adaptive_Security_Appliance_Software	7 Feb 201816:25	–	githubexploit
ATTACKERKB	CVE-2018-0101	29 Jan 201820:29	–	attackerkb
BDU FSTEC	The vulnerability of the VPN Secure Sockets Layer (SSL) function of the microprogramming network interface device in Cisco Adaptive Security Appliance (ASA) allows a hacker to execute arbitrary code and gain full control over the system.	9 Feb 201800:00	–	bdu_fstec

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180129-asa1
nccgroup	www.nccgroup.trust/globalassets/newsroom/uk/events/2018/02/reconbrx2018-robin-hood-vs-cisco-asa.pdf
pastebin	www.pastebin.com/YrBcG2Ln
threatpost	www.threatpost.com/cisco-issues-new-patches-for-critical-firewall-software-vulnerability/129793/

09 Feb 2018 13:06Current

1.9Low risk

Vulners AI Score1.9

EPSS0.95707

cisco firewall vulnerability attack exploit malicious cve-2018-0101 patch xml asa 5500 firepower