Cisco fixes firewall zero-day that crashes SSL VPN devices
Event Brief generated 38 s read
Written by an AI. It was merged from the source on this page and has not been reviewed by a person.
The short version
- Cisco patched a denial-of-service zero-day in ASA and FTD software.
- Attackers are already exploiting it to crash SSL VPN devices remotely.
- Admins with exposed VPN gateways should apply the update first.
What happened
Cisco released security updates for a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software. According to BleepingComputer, attackers are exploiting the flaw to remotely crash vulnerable firewall devices. The item does not give affected version numbers or exploit counts.
Why it might matter
A crash bug on an internet-facing VPN gateway can cut off remote access for staff. Operators who delay the update may face outages, and the flaw may be used as a distraction or a first step in a larger attack.
What we don’t know yet
The feed summary does not list affected versions, the CVE identifier, or how many devices have been hit. It also does not say whether the flaw allows code execution beyond the crash.
