CVE entry · CVE-2024-20353
CVE-2024-20353: Cisco ASA and FTD Denial of Service Vulnerability
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.
- Actively exploited: added to CISA’s KEV catalog on April 24, 2024.
- Use by ransomware: not established so far.
- Remediation deadline for US federal agencies: May 1, 2024.
- CERT-FR alert CERTFR-2024-ALE-007 of April 25, 2024.
Description from CISA’s KEV catalog.
CERT-FR alerts and notices
-
CERTFR-2024-ALE-007Multiples vulnérabilités dans les produits Cisco (25 avril 2024)
What to do
- Check whether your estate includes Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD), including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
- Vendor advisory or reference cited by CISA (sec.cloudapps.cisco.com)
- NVD entry (NIST)
- CISA KEV catalog
Other Cisco vulnerabilities
-
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
-
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
-
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
-
Cisco Secure Email Gateway SQL Injection Vulnerability
-
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
-
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability