Cisco has started releasing patches for its ASA software to address the Equation Groups EXTRABACON exploit included in the NSA data dump leaked online. Cisco has released the necessary patches for the vulnerability in the ASA software. The company will not issue any patch for no longer supported devices, including firewall modules and PIX firewalls, including those no longer used by the IT giant as a temporary solution. The vulnerability is due to a buffer overflow in the affected code area.”]
Source: https://securityaffairs.co/wordpress/50618/security/cisco-fixed-extrabacon-exploit.html