DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco Firepower und ASA: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-10-23
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Cisco Firepower und Cisco ASA (Adaptive Security Appliance) ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen, erhöhte Rechte zu erlangen und einen Cross-Site-Scripting-Angriff durchzuführen.
01
beschreibt (17)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-20495US | — | — | ||
A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticate… | ||||
| CVE-2024-20494US | — | — | ||
A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthent… | ||||
| CVE-2024-20493US | medium5.3 | — | ||
A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defens… | ||||
| CVE-2024-20485US | medium6.7 | — | ||
A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local atta… | ||||
| CVE-2024-20481US | medium5.8OT kritisch | KEV | ||
A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauth… | ||||
| CVE-2024-20426US | high8.6 | — | ||
A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (… | ||||
| CVE-2024-20408US | — | — | ||
A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an au… | ||||
| CVE-2024-20402US | high8.6 | — | ||
A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… | ||||
| CVE-2024-20384US | — | — | ||
A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unau… | ||||
| CVE-2024-20382US | medium6.1 | — | ||
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthen… | ||||
| CVE-2024-20370US | — | — | ||
A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… | ||||
| CVE-2024-20341US | medium6.1 | — | ||
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthen… | ||||
| CVE-2024-20331US | medium5.9OT erhöht | — | ||
A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defe… | ||||
| CVE-2024-20299US | — | — | ||
A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, re… | ||||
| CVE-2024-20297US | — | — | ||
A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, re… | ||||
| CVE-2024-20268US | — | — | ||
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… | ||||
| CVE-2024-20260US | — | — | ||
Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defen… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
- Cisco Security Advisory vom 2024-10-23external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan