Known vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance (ASA) 7.4.2

Version: 7.4.2
Software CPE: cpe:2.3:h:cisco_systems:Cisco Adaptive Security Appliance (ASA):*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) version 7.4.2 Cisco Secure Firewall Adaptive Security Appliance (ASA) 7.4.2 is affected by 6 vulnerabilities: 1 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150914 - Signed to Unsigned Conversion Error
CVE-2026-20248
CWE-195 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26, 10.0.2 18.09.2026 SB20260918124
#VU150872 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-20154
CWE-835 Medium
No
No
7.0.9, 7.0.10, 7.2.11, 7.2.12, 7.4.7, 7.4.8, 7.6.6, 7.7.13, 9.16.4.89, 9.16.4.92, 9.16.4.103, 9.18.4.71, 9.18.4.76, 9.18.4.82, 9.18.4.94, 9.20.4.19, 9.20.4.22, 9.20.4.28, 9.20.4.30, 9.20.4.34, 9.20.4.49, 9.22.2.32, 9.22.3, 9.22.3.5, 9.22.3.26, 9.23.1.26, 9.23.1.32, 9.23.1.47, 9.24.1, 9.24.1.5, 9.24.1.9, 9.24.1.11, 9.24.1.26, 10.0.0, 10.0.2 18.09.2026 SB20260918124
#VU99340 - Authentication Bypass by Spoofing
CVE-2024-20384
CWE-290 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 25.10.2024 SB2024102517
#VU99328 - Missing Release of Resource after Effective Lifetime
CVE-2024-20493
CWE-772 Medium
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102440
#VU99327 - Improper input validation
CVE-2024-20494
CWE-20 High
No
No
7.4.2, 7.4.2.1, 7.6.0, 9.19.1.37, 9.20.2.22, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102432
#VU99326 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20382
CWE-79 Low
No
No
7.0.6.3, 7.2.9, 7.4.2.1, 7.6.0, 9.16.4.62, 9.16.4.67, 9.16.4.70, 9.16.4.71, 9.17.1.45, 9.18.4.34, 9.18.4.40, 9.18.4.47, 9.19.1.37, 9.20.3, 9.20.3.4, 9.20.3.7, 9.22.1.1 24.10.2024 SB2024102431