3 Oktober 2023 - 18:17


An exploit could allow the attacker to execute arbitrary code and obtain full control of the system, or cause a reload of the affected device.

An attacker could exploit this vulnerability by sending multiple, crafted XML packets to a webvpn-configured interface on the affected system. The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device.

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code.
