Connection Hijacking Vulnerability- Huawei

A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service.

Due to the lack of reverse address check and TCP connection tracing, attackers on the same LAN with the victim device successfully exploit this vulnerability to hijack TCP sessions and connections and inject forged messages. Successful exploitation of this vulnerability may cause DoS or information leakage on the victim device.

The Uganda National CERT and Coordination Center (CERT.UG/CC) encourages users and administrators to review the Huawei Security advisory and apply the recommended migrations.