Proof of Concept Published for Cisco ASA Flaw Patched in October

On June 24, Positive Technologies published a proof-of-concept exploit for CVE-2020-3850 to Twitter. CVE-2020-3850 is a cross-site scripting vulnerability in Cisco Adaptive Security Appliance and Firepower Threat Defense software web services. 

Cisco released a security advisory and patches for this vulnerability last year. Users are recommended to prioritize patching as Tenable has received a report of exploitation in the wild. 

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.