Zerosum0X0

**Name of the Vulnerable Software and Affected Versions** Cisco Adaptive Security Appliance (ASA) Software versions prior to the fixed version **Description** A vulnerability in the Secure Sockets Layer (SSL) VPN functionality could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The issue is due to an attempt to double free a region of memory when the webvpn feature is enabled. An attacker could exploit this by sending multiple, crafted XML packets to a webvpn-configured interface. This could allow the attacker to execute arbitrary code and obtain full control of the system, or cause a reload of the affected device. **Recommendations** For Cisco ASA Software, update to a fixed version to resolve the issue. As a temporary workaround, consider disabling the webvpn feature until a patch is available. Restrict access to webvpn-configured interfaces to minimize the risk of exploitation. Avoid using crafted XML packets in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability, however, it is recommended to check the Fixed Software section for more information.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions Vista SP2, Server 2008 SP2 and R2 SP1, 7 SP1, 8.1, Server 2012 Gold and R2, RT 8.1, 10 Gold, 1511, 1607, and Server 2016 **Description** The issue allows remote attackers to obtain sensitive information from process memory via crafted packets. This can potentially affect a large number of devices worldwide. **Recommendations** For Microsoft Windows versions Vista SP2, Server 2008 SP2 and R2 SP1, 7 SP1, 8.1, Server 2012 Gold and R2, RT 8.1, 10 Gold, 1511, 1607, and Server 2016, consider disabling the SMBv1 server as a temporary workaround until a patch is available. Restrict access to the SMBv1 server to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows (affected versions not specified) **Description** The issue exists due to insufficient input validation in the SMBv1 protocol of Microsoft Windows. It allows a remote attacker to execute arbitrary code using specially crafted packets. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Server Message Block (SMBv1) (affected versions not specified) **Description** The issue allows remote attackers to execute arbitrary code and affect the system. This is due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. Exploitation of the issue may allow a remote attacker to execute arbitrary code using specially crafted packets. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Adaptive Security Appliance (ASA) Software versions through 9.4.2.3 **Description** The issue is caused by a buffer overflow in the Simple Network Management Protocol (SNMP) code, allowing remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets. This can also cause a reload of the affected system. The vulnerability affects various Cisco devices, including ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM. **Recommendations** For versions through 9.4.2.3, consider disabling SNMP or restricting access to the SNMP service until a patch is available. As a temporary workaround, restrict access to the vulnerable devices to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.