Windows 10: Cisco ASA Password recovery without loosing configuration

Noel · Jun 9, 2025 at 10:37 AM

If you have lost the password and you want to reset the password of your Cisco ASA router without losing the configuration, below is the process to do so.

Please note: You must be very careful when performing this procedure and have physical access to the router to complete it.

Connect via Putty (COM)
Boot the device
During boot, press CTRL+C

Before proceeding, take note of the current configuration register
Do you wish to change this Configuration Y
Disable System Configuration Y
The rest press Enter (default)

When the prompt is ready, type boot
When the router boots with the default configuration, enter enable (enable password is blank)

Enter copy startup-config running-config
After the configuration is complete, enter the following

Configure Terminal
Password <New_Password>
Enable Password <New_Password>
Username <User> password <New_Password> Privilege 15
config-register <Register code from the start>

Save the configuration by running copy running-config startup-config

Reboot the router, and you should have access to the configuration.

read more...

Easy Rhino · Jun 9, 2025 at 11:28 AM

vpn site-to-site issues with a cisco asa

*Confused

It's just network traffic, file permissions shouldnt be a problem, and they dont exist on Cisco equipment to my knowlege.

Any event i rebooted the ubuntu virtual machines in question and left the asa on. Its having the same issue. So redoing the ACLs on the ASA fixes the problem, but its not the root of it either.
Click to expand...

that cisco ASA has some sort of software on it that allows you to save a configuration file right?

Borg 386 · Jun 9, 2025 at 11:28 AM

Cisco zero-day exploited in the wild to crash and reload devices

The Cisco security team has revealed earlier the existence of a zero-day vulnerability affecting products that run Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software.

The vulnerability has been exploited in the wild, according to a security advisory the company published a few hours ago. No patches are available at the time of writing.
Click to expand...

Cisco says CVE-2018-15454 "could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a denial of service (DoS) condition."

Because SIP inspection is enabled by default in all ASA and FTD software packages, a large number of Cisco devices are believed to be vulnerable. Cisco has already confirmed that the following products are affected if they run ASA 9.4 and later, or FTD 6.0 and later:

3000 Series Industrial Security Appliance (ISA)

ASA 5500-X Series Next-Generation Firewalls

ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers

Adaptive Security Virtual Appliance (ASAv)

Firepower 2100 Series Security Appliance

Firepower 4100 Series Security Appliance

Firepower 9300 ASA Security Module

FTD Virtual (FTDv)

Until Cisco ships ASA and FTD software updates to address with this vulnerability, Cisco has provided three mitigations that devices owners can take and prevent a remote attacker from crashing their equipment.

The most obvious one is for device owners to disable SIP inspection. Second, if device owners have managed to identify an attacker's IP address, they can block traffic from that IP using the ASA and FTD traffic filtering systems at their disposal.

Furthermore, Cisco says that malicious traffic that has been observed in attacks until now has also used the 0.0.0.0 IP address for the "Sent-by Address" field, which also makes it easy for companies to filter an attacker's incoming traffic.

Step-by-step information on how to configure these mitigations, but also on how to determine if an ASA or FTD device has been hit by CVE-2018-15454 are available in Cisco's advisory.
Click to expand...

https://tools.cisco.com/security/cen...asaftd-sip-dos

Cisco zero-day exploited in the wild to crash and reload devices | ZDNet

Brink · Jun 9, 2025 at 11:28 AM

Cisco zero-day exploited in the wild to crash and reload devices

The Cisco security team has revealed earlier the existence of a zero-day vulnerability affecting products that run Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software.

The vulnerability has been exploited in the wild, according to a security advisory the company published a few hours ago. No patches are available at the time of writing.
Click to expand...

Cisco says CVE-2018-15454 "could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a denial of service (DoS) condition."

Because SIP inspection is enabled by default in all ASA and FTD software packages, a large number of Cisco devices are believed to be vulnerable. Cisco has already confirmed that the following products are affected if they run ASA 9.4 and later, or FTD 6.0 and later:

3000 Series Industrial Security Appliance (ISA)

ASA 5500-X Series Next-Generation Firewalls

ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers

Adaptive Security Virtual Appliance (ASAv)

Firepower 2100 Series Security Appliance

Firepower 4100 Series Security Appliance

Firepower 9300 ASA Security Module

FTD Virtual (FTDv)

Until Cisco ships ASA and FTD software updates to address with this vulnerability, Cisco has provided three mitigations that devices owners can take and prevent a remote attacker from crashing their equipment.

The most obvious one is for device owners to disable SIP inspection. Second, if device owners have managed to identify an attacker's IP address, they can block traffic from that IP using the ASA and FTD traffic filtering systems at their disposal.

Furthermore, Cisco says that malicious traffic that has been observed in attacks until now has also used the 0.0.0.0 IP address for the "Sent-by Address" field, which also makes it easy for companies to filter an attacker's incoming traffic.

Step-by-step information on how to configure these mitigations, but also on how to determine if an ASA or FTD device has been hit by CVE-2018-15454 are available in Cisco's advisory.
Click to expand...

https://tools.cisco.com/security/cen...asaftd-sip-dos

Cisco zero-day exploited in the wild to crash and reload devices | ZDNet

Windows 10: Cisco ASA Password recovery without loosing configuration

Cisco ASA Password recovery without loosing configuration

Cisco ASA Password recovery without loosing configuration

Cisco ASA Password recovery without loosing configuration

Cisco ASA Password recovery without loosing configuration - Similar Threads - Cisco ASA Password

Reset Surface Pro without Password or Recovery Key

Getting into computer recovery tools without a Microsoft password?

Getting into computer recovery tools without a Microsoft password?

Windows 10 looses networkadapter configuration

Loosing passwords on Windows Mail

Need password for Cisco 03467

Is there a way to use password recovery disk without changing the password?

Sisco asa 5505

Is there a Windows 10 VPN client that works with Cisco ASA Firewalls