I think they&#x27;re suggesting that someone snooping the encrypted traffic coming from the ASA couldn&#x27;t leverage this vulnerability for easier decryption. (i.e. this is an active, not passive vulnerability).<p>That&#x27;s probably clear when they say it allows RCE, but who knows.