CVE-2021-1585 Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability
An attacker can execute arbitrary code on a user's system by intercepting ASDM Launcher traffic and injecting malicious code due to missing signature verification.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-1585?
CVE-2021-1585 is a high-severity code injection vulnerability in Cisco Adaptive Security Appliance (ASA) Software, published on 8 Jul 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability in the Cisco Adaptive Security Device Manager (ASDM) Launcher could allow an unauthenticated, remote attacker to execute arbitrary code on a user's operating system. This vulnerability is due to a lack of proper signature verification for specific code exchanged between the ASDM and the Launcher. An attacker could exploit this vulnerability by leveraging a man-in-the-middle position on the network to intercept the traffic between the Launcher and the ASDM and then inject arbitrary code. A successful exploit could allow the attacker to execute arbitrary code on the user's operating system with the level of privileges assigned to the ASDM Launcher. A successful exploit may require the attacker to perform a social engineering attack to persuade the user to initiate communication from the Launcher to the ASDM.
Weakness: CWE-94
Which versions are affected by CVE-2021-1585?
It affects 1 product.
Products include Cisco Adaptive Security Device Manager.
How do I fix CVE-2021-1585?
No fix has been published for CVE-2021-1585 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2021-1585 being exploited?
There is no known exploitation of CVE-2021-1585 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software
Sources
Also known as GHSA-3fc6-gf75-vvc3.