Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service

[PhilipDAth]

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-meraki-mx-vpn...

"A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the Cisco AnyConnect service on an affected device."

[Blue_Bird]

Thanks for sharing..! @PhilipDAth 

[jimmyt234]

Luckily I think 99% of our AnyConnect deployments are leveraging SAML and not using certificate auth so not vulnerable to this!