erroneo.us
Search all guides⌘K

Digest · Tuesday

Security digest: March 18, 2014

1 editorial brief.

All digests · RSS · Markdown

Take stock

  • Check exposure: Cisco ASA CVE-2014-2120: WebVPN Login XSS, in KEV 2024. Owners of Cisco ASA appliances with WebVPN or AnyConnect portals enabled that still run 2014-era software or have not been upgraded in years.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Check exposure

· Vulnerability · CVE-2014-2120

Cisco ASA CVE-2014-2120: WebVPN Login XSS, in KEV 2024

A low-impact, user-assisted bug from 2014; the real signal is that botnets still probe ASA VPN portals, so make sure no ASA is on decade-old software, which would also carry far worse exploited flaws.

Must act: Owners of Cisco ASA appliances with WebVPN or AnyConnect portals enabled that still run 2014-era software or have not been upgraded in years.

Can relax: Teams whose ASAs run a currently supported release and follow Cisco's recent advisories; this bug does not compromise the firewall itself.

  1. Run show version on every ASA and confirm it is on a currently supported release with recent security fixes.
  2. Upgrade any ASA still on 2014-era 8.x or 9.0/9.1 software; there is no workaround for this bug.
  3. Check that later exploited ASA bugs are also fixed, including CVE-2020-3259 and CVE-2025-20333/CVE-2025-20362.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 0

GitHub-reviewed advisories rated critical, published this day (Pacific time).

None.