Product:
Secure Firewall Adaptive Security Appliance
Summary
A vulnerability in the LUA interpreter of the Remote Access SSL VPN feature could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload unexpectedly, resulting in a denial of service condition. This vulnerability arises from trusting user input without validation in the LUA interpreter. An attacker could exploit this by sending crafted HTTP packets to the Remote Access SSL VPN server.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.7 | CVE-2026-20100 |
Exploitation
To exploit this vulnerability, an attacker must have a valid VPN connection to the device. They can then send specially crafted HTTP packets to the Remote Access SSL VPN server, which may lead to the device reloading unexpectedly. This results in a denial of service condition, affecting the availability of the service.
Affected Products
- Secure Firewall Adaptive Security Appliance: Affected by the LUA interpreter vulnerability in the Remote Access SSL VPN feature.
- Secure Firewall Threat Defense: Also impacted by the same vulnerability in the Remote Access SSL VPN feature.
Mitigation
To mitigate this vulnerability, it is recommended to validate user input in the LUA interpreter and implement proper security measures to prevent unauthorized access. Regular updates and patches from Cisco should be applied to ensure the device is protected against known vulnerabilities.