Missing Release of Resource after Effective Lifetime in Cisco Firewall Threat Defense (FTD) and Cisco Adaptive Security Appliance (ASA) - CVE-2024-20481
Published: October 23, 2024
Vulnerability identifier: #VU99291
CSH Severity: High
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-20481
CWE-ID: CWE-772
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to resource exhaustion in the Remote Access VPN (RAVPN) service. A remote attacker can perform password spraying attack, cause resource exhaustion and perform a denial of service attack against the RAVPN service.
Note, the vulnerability is being actively exploited in the wild.
Affected software
Cisco Firewall Threat Defense (FTD)
Cisco Adaptive Security Appliance (ASA)
Cisco Adaptive Security Appliance (ASA)
How to mitigate CVE-2024-20481
Install updates from vendor's website.
Cisco Firewall Threat Defense (FTD) - addressed in versions 7.0.6.3, 7.2.9, 7.4.2
Cisco Adaptive Security Appliance (ASA) - addressed in versions 9.16.4.62, 9.17.1.45, 9.18.4.29, 9.19.1.37, 9.20.2.22, 9.22.1.1
Cisco Adaptive Security Appliance (ASA) - addressed in versions 9.16.4.62, 9.17.1.45, 9.18.4.29, 9.19.1.37, 9.20.2.22, 9.22.1.1