Federal cybersecurity regulators have updated the Known Exploited Vulnerabilities catalog to mandate rapid patching for a heap inspection flaw in perimeter firewall appliances. The vulnerability allows remote unauthenticated actors to send malformed network packets to trigger memory corruption and cause system reboots or code execution.
The vulnerability, tracked as CVE-2026-20349, impacts Cisco Adaptive Security Appliance ASA and Firewall Threat Defense FTD software. The issue stems from improper memory handling in packet inspection subroutines. Threat actors actively scanning internet-exposed gateways transmit crafted packet sequences to force memory leaks or appliance crashes, disrupting perimeter filtering and remote access services.
Subverting boundary firewall engines compromises perimeter availability and traffic inspection integrity. When security appliances experience forced crashes or memory corruption, perimeter network routing and encrypted VPN tunnels are disrupted across corporate environments.
– Install software maintenance updates distributed by Cisco across all ASA and FTD firewall deployments immediately.
– Inspect interface diagnostic logs for high-frequency connection drops or unverified memory access errors.
– Restrict management interface visibility exclusively to isolated, non-routable administration VLANs.
– Monitor perimeter traffic for anomalous packet streams targeting deep packet inspection endpoints.
Perimeter gateway security depends on continuous memory management validation and prompt firmware updates to ensure core firewall appliances remain operational and insulated from malicious packet manipulation. #CodeDefence #Cisco #ASA #FTD #Firewall #CISA #KEV #NetworkSecurity
/
