&gt; some type of exploit for the Cisco ASA as well<p>Given ASAs run a 2.6 kernel that&#x27;s not hard.  From my Kiwicon 8 notes on Alec Stuart-Muirk&#x27;s talk:<p>* Literally every protocol handler has CVEs against it.<p>* Every time Cisco add a new one it gets at least a DOS CVE. (There are some proofs of concept for pivoting these into real exploits on other Cisco products.)<p>* The ASA’s high availability protocols are unauthenticated and unencrypted. This is bad. Like, “will accept any packet claiming to be a management packet as valid” bad.<p>* Some authentication is optionally available, but if you enable it, the ASA will still accept unauthenticated protocols.