Interpretation conflict in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) - CVE-2024-20293
Published: May 27, 2024
Vulnerability identifier: #VU89824
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-20293
CWE-ID: CWE-436
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to a logic error when activating an access control list (ACL). A remote non-authenticated attacker can bypass implemented access controls and gain unauthorized access to the network.
Affected software
Cisco Secure Firewall Threat Defense (FTD)
Cisco Secure Firewall Adaptive Security Appliance (ASA)
Cisco Secure Firewall Adaptive Security Appliance (ASA)
How to mitigate CVE-2024-20293
Install updates from vendor's website.
Cisco Secure Firewall Threat Defense (FTD) - update to 7.4.1
Cisco Secure Firewall Adaptive Security Appliance (ASA) - addressed in versions 9.19.1.27, 9.20.2
Cisco Secure Firewall Adaptive Security Appliance (ASA) - addressed in versions 9.19.1.27, 9.20.2