TROYANOSYVIRUS
Volver a CVEs

CVE-2024-20353

HIGHCISA KEV
8.6

Descripcion

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.

Detalles CVE

Puntuacion CVSS v3.18.6
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado4/24/2024
Ultima modificacion10/28/2025
Fuentekev
Avistamientos honeypot0

CISA KEV

VendedorCisco
ProductoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Nombre vulnerabilidadCisco ASA and FTD Denial of Service Vulnerability
Fecha inclusion KEV2024-04-24
Fecha limite remediacion2024-05-01
Uso en ransomwareUnknown

Productos afectados

cisco:adaptive_security_appliance_softwarecisco:firepower_threat_defense

Debilidades (CWE)

CWE-835CWE-835

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.