The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6), 9.2 before 9.2(3.4), and 9.3 before 9.3(3), when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a denial of service (VPN outage or device reload) via a crafted XML document, aka Bug ID CSCus95290.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Cisco Asa | — | Upgrade to Cisco ASA version 9.1(6)Upgrade to Cisco ASA version 8.6(1.17)Upgrade to Cisco ASA version 9.0(4.33)Upgrade to Cisco ASA version 9.3(3)Upgrade to Cisco ASA version 8.4(7.28)Upgrade to Cisco ASA version 9.2(3.4) | Jun 9, 2015 | Apr 12, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub