Interpretation conflict in Cisco Firewall Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) - CVE-2024-20293
Published: May 27, 2024
Vulnerability identifier: #VU89824
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-20293
CWE-ID: CWE-436
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to a logic error when activating an access control list (ACL). A remote non-authenticated attacker can bypass implemented access controls and gain unauthorized access to the network.
Affected software
Cisco Firewall Threat Defense (FTD)
Cisco Adaptive Security Appliance (ASA)
Cisco Adaptive Security Appliance (ASA)
How to mitigate CVE-2024-20293
Install updates from vendor's website.
Cisco Firewall Threat Defense (FTD) - update to 7.4.1
Cisco Adaptive Security Appliance (ASA) - addressed in versions 9.19.1.27, 9.20.2
Cisco Adaptive Security Appliance (ASA) - addressed in versions 9.19.1.27, 9.20.2