CVE-2024-20353KEV Β· OVERDUECWE-835

Cisco ASA and FTD Denial of Service Vulnerability

High Β· published April 24, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.6. It is confirmed in active exploitation. It sits in the 99.4th percentile for exploit probability.

906
days past CISA
deadline
CVSS v3.1
8.6
EPSS
71%
Percentile
99.4
In the wild
Confirmed
What it is

🚨 An unauthenticated attacker only needs a crafted HTTP request to cause chaos! This vulnerability in Cisco ASA and FTD software can lead to an unexpected device reload, creating a denial of service (DoS) condition. ⚑ Think of it like a restaurant with a faulty reservation system that crashes every time a customer tries to book a table. One bad request leads to a full shutdown, leaving everyone hungry and waiting outside! If exploited, this vulnerability could make the device go belly up, leaving your network defenseless and users without access. It's like losing your security guard just when you need them mostβ€”absolutely devastating for your organization!

Put simply

Think of it like a restaurant with a faulty reservation system that crashes every time a customer tries to book a table. One bad request leads to a full shutdown, leaving everyone hungry and waiting outside! This DoS vulnerability arises from incomplete error checking when processing HTTP headers. By sending a specially crafted request to the management or VPN web servers, an attacker can trigger a device reload, crashing the system.

What to do

If exploited, this vulnerability could make the device go belly up, leaving your network defenseless and users without access. It's like losing your security guard just when you need them mostβ€”absolutely devastating for your organization! To remediate this, patch your Cisco devices immediately to the latest version! Regularly audit your firewall configurations and ensure you're monitoring for abnormal traffic patterns. πŸ”’ You've got this! Follow these steps, and you'll secure your network in no time. πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
8.6 Β· HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.70686 Β· 99.4th percentile
Weakness
CWE-835 Β· Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2024-04-24T23:15Z
KEV added
2024-04-24 Β· due 2024-05-01
Affected products (267)
ProductVersionsFixed in
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/adaptive_security_appliance_softwareall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
References (4)
EPSS history
Timeline
  • 24 APR 18:15Z
    A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software…
    cvelistv5
  • 24 APR 00:00Z
    Added to CISA KEV β€” remediate by May 1
    kev