Cisco says that this flaw can only be exploited if the RAVPN service is enabled. Admins can check if SSL VPN is enabled on a device by issuing the following command: Cisco has also issued 37 ...

It was given a medium severity rating of 5.8. Describing the theory behind the attack, Cisco says an attacker could send a large number of VPN authentication requests to a vulnerable device ...