CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-04-24
Cisco ASA and FTD Software Local Privilege Escalation and Persistent Remote Code Execution Vulnerability (CVE-2024-20359)
[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software
[Impact] An authenticated, local attacker with administrator privileges can execute arbitrary code with root-level privileges and establish persistence across device reboots by preloading crafted files
[Mitigation] Apply the official security updates provided by Cisco immediately and audit the flash file system for unauthorized files