Missing Release of Resource after Effective Lifetime in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) - CVE-2024-20481
Published: October 23, 2024
Vulnerability identifier: #VU99291
CSH Severity: High
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-20481
CWE-ID: CWE-772
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to resource exhaustion in the Remote Access VPN (RAVPN) service. A remote attacker can perform password spraying attack, cause resource exhaustion and perform a denial of service attack against the RAVPN service.
Note, the vulnerability is being actively exploited in the wild.
Affected software
Cisco Secure Firewall Threat Defense (FTD)
Cisco Secure Firewall Adaptive Security Appliance (ASA)
Cisco Secure Firewall Adaptive Security Appliance (ASA)
How to mitigate CVE-2024-20481
Install updates from vendor's website.
Cisco Secure Firewall Threat Defense (FTD) - addressed in versions 7.0.6.3, 7.2.9, 7.4.2
Cisco Secure Firewall Adaptive Security Appliance (ASA) - addressed in versions 9.16.4.62, 9.17.1.45, 9.18.4.29, 9.19.1.37, 9.20.2.22, 9.22.1.1
Cisco Secure Firewall Adaptive Security Appliance (ASA) - addressed in versions 9.16.4.62, 9.17.1.45, 9.18.4.29, 9.19.1.37, 9.20.2.22, 9.22.1.1