ID:7355 - Exploit for Code Injection in Cisco Adaptive Security Device Manager (ASDM) - CVE-2021-1585

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a lack of proper signature verification for specific code exchanged between the ASDM and the Launcher. A remote attacker can leverage a man-in-the-middle position on the network and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation