CVE-2024-20339CWE-476

CVE-2024-20339

High · published October 23, 2024

CVSS v3.1
8.6
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

A vulnerability in the TLS processing feature of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to an issue that occurs when TLS traffic is processed. An attacker could exploit this vulnerability by sending certain TLS traffic over IPv4 through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition and impacting traffic to and through the affected device.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00711 · 53.0th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-10-23T21:15Z
Affected products (80)
ProductVersionsFixed in
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
References (3)
EPSS history
Timeline
  • 23 OCT 17:09Z
    Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability
    cvelistv5