Hackers actively exploiting vulnerabilities in Cisco security appliances
Networking giant Cisco is warning customers that attackers are actively exploiting a vulnerability in the company”s Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software.
CVE-2018-15454 describes a vulnerability in the Session Initiation Protocol (SIP) inspection engine of ASA and FTD software. Exploited correctly, the flaw allows a remote attacker to deploy a denial of service (DoS) condition by reloading or triggering high CPU cycles.
Caused by improper handling of SIP traffic, the flaw could allow bad actors to send SIP requests designed to specifically trigger the issue at a high rate across an affected device.
While the vulnerability itself isn”t devastating, affected customers can nevertheless experience some downtime, with devices crashing and reloading.
The vulnerability is present in Cisco ASA Software Release 9.4 and later and Cisco FTD Software Release 6.0 and later. The following Cisco products running the software with SIP inspection enabled are confirmed as “affected:”
- 3000 Series Industrial Security Appliance (ISA)
- ASA 5500-X Series Next-Generation Firewalls
- ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers
- Adaptive Security Virtual Appliance (ASAv)
- Firepower 2100 Series Security Appliance
- Firepower 4100 Series Security Appliance
- Firepower 9300 ASA Security Module
- FTD Virtual (FTDv)
Users will have to wait for Cisco to release patches for the affected hardware. More worryingly, the vulnerability is actively being exploited in the wild, Cisco says. The company”s advisory includes a few indicators of compromise, as well as some steps to mitigate risk. No true workarounds are currently available.
Watch Out for These Ongoing Bank of America Phishing Campaigns Targeting Customers in the US
July 16, 2021
How to protect yourself against cyberstalking
July 06, 2021
The Top Five Security Risks Smartphone Users Face Today
July 02, 2021
Phishing Alert: Scammers Use Fake SharePoint and DocuSign Messages to Steal Users’ Login Credentials
July 02, 2021
Your Doxxing Dossier Will Keep Growing Thicker Until You See the Danger
June 30, 2021
Mobile security threats: reality or myth?
June 13, 2021
FOLLOW US ON
You might also like
July 23, 2021
July 22, 2021
July 20, 2021