From securityaffairs.co
Cisco provided an update on a remote code execution (RCE) vulnerability (CVE-2021-1585) in the Adaptive Security Device Manager (ADSM) Launcher, the IT giant confirmed that the flaw has yet to be addressed.
Cisco Adaptive Security Device Manager (ASDM) provided a local, web-based interface to allow customers to manage Cisco Adaptive Security Appliance (ASA) firewalls and the Cisco AnyConnect Secure Mobility clients.
The vulnerability affects ADSM software versions from releases ‘9.16.1 and earlier.
“A vulnerability in the Cisco Adaptive Security Device Manager (ASDM) Launcher could allow an unauthenticated, remote attacker to execute arbitrary code on a user’s operating system.