我想提醒Cisco ASA的用戶,應該立刻更新修補您的ASA OS。
問題是這樣的,有一個嚴重的Cisco ASA OS的缺陷被找到,駭客可以透過這個弱點,控制您的Cisco ASA。
好消息是,Cisco 已經釋出修補過的 ASA OS。
Cisco ASA Software is affected by this vulnerability if the system is configured to terminate IKEv1 or IKEv2 VPN connections.
This includes the following:
- LAN-to-LAN IPsec VPN
- Remote access VPN using the IPsec VPN client
- Layer 2 Tunneling Protocol (L2TP)-over-IPsec VPN connections
- IKEv2 AnyConnect
Cisco ASA Software can be downloaded from the Software Center on Cisco.com by visiting http://www.cisco.com/cisco/software/navigator.html.
詳細的資訊,請參考官方網頁說明。
Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability (CVE-2016-1287)