CVE-2024-20481

cisco secure firewall threat defense

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-20481

Katalog CVE

CVSS 5.8 · Medium KEV · sudah dieksploitasi EPSS 15,9%

Kerentanan Missing Release of Resource after Effective Lifetime pada cisco secure firewall threat defense. Skor CVSS 3.1 5.8 (Medium) menurut NVD. Masuk katalog KEV CISA pada 24 Oktober 2024, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service. This vulnerability is due to resource exhaustion. An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. A successful exploit could allow the attacker to exhaust resources, resulting in a DoS of the RAVPN service on the affected device. Depending on the impact of the attack, a reload of the device may be required to restore the RAVPN service. Services that are not related to VPN are not affected. Cisco Talos discussed these attacks in the blog post Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentials.

Rincian

Terbit di NVD
23 Oktober 2024
Terakhir diubah
11 Agustus 2026
Status NVD
Analyzed
CVSS 3.1
5.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-772: Missing Release of Resource after Effective Lifetime
EPSS (30 hari)
15,9% peluang dieksploitasi; lebih tinggi dari 96,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama
Cisco ASA and FTD Denial-of-Service Vulnerability
Masuk KEV
24 Oktober 2024
Tenggat CISA
14 November 2024 (untuk instansi federal AS)
Ransomware
Belum tercatat
Tindakan wajib
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco secure firewall threat defense Versi 6.2.3
cisco secure firewall threat defense Versi 6.2.3.1
cisco secure firewall threat defense Versi 6.2.3.2
cisco secure firewall threat defense Versi 6.2.3.3
cisco secure firewall threat defense Versi 6.2.3.4
cisco secure firewall threat defense Versi 6.2.3.5
cisco secure firewall threat defense Versi 6.2.3.6
cisco secure firewall threat defense Versi 6.2.3.7
cisco secure firewall threat defense Versi 6.2.3.8
cisco secure firewall threat defense Versi 6.2.3.9
cisco secure firewall threat defense Versi 6.2.3.10
cisco secure firewall threat defense Versi 6.2.3.11
cisco secure firewall threat defense Versi 6.2.3.12
cisco secure firewall threat defense Versi 6.2.3.13
cisco secure firewall threat defense Versi 6.2.3.14
cisco secure firewall threat defense Versi 6.2.3.15
cisco secure firewall threat defense Versi 6.2.3.16
cisco secure firewall threat defense Versi 6.2.3.17
cisco secure firewall threat defense Versi 6.2.3.18
cisco secure firewall threat defense Versi 6.4.0
cisco secure firewall threat defense Versi 6.4.0.1
cisco secure firewall threat defense Versi 6.4.0.2
cisco secure firewall threat defense Versi 6.4.0.3
cisco secure firewall threat defense Versi 6.4.0.4
cisco secure firewall threat defense Versi 6.4.0.5
cisco secure firewall threat defense Versi 6.4.0.6
cisco secure firewall threat defense Versi 6.4.0.7
cisco secure firewall threat defense Versi 6.4.0.8
cisco secure firewall threat defense Versi 6.4.0.9
cisco secure firewall threat defense Versi 6.4.0.10
cisco secure firewall threat defense Versi 6.4.0.11
cisco secure firewall threat defense Versi 6.4.0.12
cisco secure firewall threat defense Versi 6.4.0.13
cisco secure firewall threat defense Versi 6.4.0.14
cisco secure firewall threat defense Versi 6.4.0.15
cisco secure firewall threat defense Versi 6.4.0.16
cisco secure firewall threat defense Versi 6.4.0.17
cisco secure firewall threat defense Versi 6.4.0.18
cisco secure firewall threat defense Versi 6.6.0
cisco secure firewall threat defense Versi 6.6.0.1
cisco secure firewall threat defense Versi 6.6.1
cisco secure firewall threat defense Versi 6.6.3
cisco secure firewall threat defense Versi 6.6.4
cisco secure firewall threat defense Versi 6.6.5
cisco secure firewall threat defense Versi 6.6.5.1
cisco secure firewall threat defense Versi 6.6.5.2
cisco secure firewall threat defense Versi 6.6.7
cisco secure firewall threat defense Versi 6.6.7.1
cisco secure firewall threat defense Versi 6.6.7.2
cisco secure firewall threat defense Versi 6.7.0
cisco secure firewall threat defense Versi 6.7.0.1
cisco secure firewall threat defense Versi 6.7.0.2
cisco secure firewall threat defense Versi 6.7.0.3
cisco secure firewall threat defense Versi 7.0.0
cisco secure firewall threat defense Versi 7.0.0.1
cisco secure firewall threat defense Versi 7.0.1
cisco secure firewall threat defense Versi 7.0.1.1
cisco secure firewall threat defense Versi 7.0.2
cisco secure firewall threat defense Versi 7.0.2.1
cisco secure firewall threat defense Versi 7.0.3

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 289 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.