DeutschShown in its original language — a full translation is planned for a future version.
Cisco Firepower und ASA: Mehrere Schwachstellen
view advisory published 2024-10-23
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Cisco Firepower und Cisco ASA (Adaptive Security Appliance) ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen, erhöhte Rechte zu erlangen und einen Cross-Site-Scripting-Angriff durchzuführen.
01
describes (17)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20495US | — | — | ||
A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticate… | ||||
| CVE-2024-20494US | — | — | ||
A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthent… | ||||
| CVE-2024-20493US | medium5.3 | — | ||
A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defens… | ||||
| CVE-2024-20485US | medium6.7 | — | ||
A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local atta… | ||||
| CVE-2024-20481US | medium5.8OT critical | KEV | ||
A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauth… | ||||
| CVE-2024-20426US | high8.6 | — | ||
A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (… | ||||
| CVE-2024-20408US | — | — | ||
A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an au… | ||||
| CVE-2024-20402US | high8.6 | — | ||
A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… | ||||
| CVE-2024-20384US | — | — | ||
A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unau… | ||||
| CVE-2024-20382US | medium6.1 | — | ||
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthen… | ||||
| CVE-2024-20370US | — | — | ||
A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… | ||||
| CVE-2024-20341US | medium6.1 | — | ||
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthen… | ||||
| CVE-2024-20331US | medium5.9OT elevated | — | ||
A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defe… | ||||
| CVE-2024-20299US | — | — | ||
A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, re… | ||||
| CVE-2024-20297US | — | — | ||
A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, re… | ||||
| CVE-2024-20268US | — | — | ||
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… | ||||
| CVE-2024-20260US | — | — | ||
Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defen… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan