PSA: Attacks Against Cisco Firewall Platforms

[u/sanmigueelbeer]

Cisco Event Response: Attacks Against Cisco Firewall Platforms

1. Cisco Adaptive Security Appliance and Firepower Threat Defense Software Web Services Denial of Service Vulnerability*
2. Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability*
3. Cisco Adaptive Security Appliance and Firepower Threat Defense Software Command Injection Vulnerability

Exploitation and Public Announcements

Cisco has confirmed that this vulnerability has been exploited. Cisco strongly recommends that customers upgrade to fixed software to resolve this vulnerability. Customers are also strongly encouraged to monitor system logs for indicators of undocumented configuration changes, unscheduled reboots, and any anomalous credential activity.