CVE-2024-20359

Katalog CVE

CVSS 6.0 · Medium KEV · sudah dieksploitasi EPSS 19,4%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada cisco adaptive security appliance software. Skor CVSS 3.1 6.0 (Medium) menurut NVD. Masuk katalog KEV CISA pada 24 April 2024, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability. This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Rincian

Terbit di NVD

24 April 2024

Terakhir diubah

11 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

6.0 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

19,4% peluang dieksploitasi; lebih tinggi dari 97,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Cisco ASA and FTD Privilege Escalation Vulnerability

Masuk KEV

24 April 2024

Tenggat CISA

1 Mei 2024 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 267 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsN... advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20359 pemerintah AS
• https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network... exploit · advisory pihak ketiga