Another Cisco Flaw Shows the Growing Risk of Internet-Facing Remote Access

Another actively exploited vulnerability in remote access infrastructure is giving security teams a familiar assignment: identify affected systems, patch them quickly, and hope attackers have not already found them. 

Cisco recently disclosed a high-severity vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. The vulnerability can allow an unauthenticated remote attacker to send specially crafted HTTP requests that cause an affected device to reload, creating a denial-of-service condition. 

Attackers are already exploiting the flaw, prompting the Cybersecurity and Infrastructure Security Agency to add it to its Known Exploited Vulnerabilities catalog. 

Organizations running affected Cisco software should patch immediately. But once the immediate vulnerability is addressed, security leaders and MSPs should consider the larger lesson. 

This is not simply another Cisco…