Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Attackers are exploiting a zero-day vulnerability in Cisco's Remote Access SSL VPN service, which allows them to remotely cause ASA and FTD firewalls to reload without authentication. This is the second zero-day vulnerability in Cisco's firewall VPN to be exploited since August. The flaw is being actively exploited by attackers. The vulnerability affects the ASA and FTD firewall models. Unauthenticated attackers can take advantage of the flaw to force the firewalls to reload.