Cisco left AnyConnect open on the external interface by default. This guy found an RCE on it with a fuzzer. Jesus. https://recon.cx/2018/brussels/talks/cisco.h

Cisco left AnyConnect open on the external interface by default. This guy found an RCE on it with a fuzzer. Jesus. https://recon.cx/2018/brussels/talks/cisco.html https://recon.cx/2018/brussels/talks/cisco.html This was announced a month and a half ago, fwiw Fun stuff: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2017/september/cisco-asa-series-part-one-intro-to-the-cisco-asa/ https://www.nccgroup.trust/uk/about-us/newsroom-and-events/b... https://github.com/nccgroup/asatools https://github.com/nccgroup/asatools