CVE-2024-20359KEV · OVERDUECWE-94code-injection

Cisco ASA and FTD Privilege Escalation Vulnerability

Medium · published April 24, 2024

Patch now

The score understates this — it's already being exploited

CVSS calls it medium at 6.0. It is confirmed in active exploitation. It sits in the 97.4th percentile for exploit probability.

906
days past CISA
deadline
CVSS v3.1
6.0
EPSS
19%
Percentile
97.4
In the wild
Confirmed
What it is

⚠️ An authenticated local attacker can copy a crafted file, leading to arbitrary code execution on Cisco devices. Think of it as a tech-savvy intruder slipping a malicious blueprint into your trusted construction plan! 🔥 Imagine a contractor who finds a way to replace a legitimate building plan with a deceptive one that allows them to modify the structure without anyone noticing. Once that blueprint is in play, it can reshape the entire building! If exploited, this vulnerability allows an attacker to execute arbitrary code with root-level privileges on the affected Cisco devices. This means they could alter critical system behaviors, potentially leading to unauthorized access or data manipulation, all while lurking in the shadows after the next reboot.

Put simply

Imagine a contractor who finds a way to replace a legitimate building plan with a deceptive one that allows them to modify the structure without anyone noticing. Once that blueprint is in play, it can reshape the entire building! The vulnerability comes from improper validation of files read from system flash memory in Cisco ASA and FTD Software. An attacker with administrator access can exploit this by placing a specially crafted file on the device's disk0: file system.

What to do

If exploited, this vulnerability allows an attacker to execute arbitrary code with root-level privileges on the affected Cisco devices. This means they could alter critical system behaviors, potentially leading to unauthorized access or data manipulation, all while lurking in the shadows after the next reboot. To protect your infrastructure, immediately ensure that your Cisco ASA and FTD Software are updated to the latest patched version. Conduct a thorough audit of your flash memory files and restrict access to only necessary personnel to limit exploitation risks. You've got this! With these steps, you'll be on your way to reinforcing your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.19434 · 97.4th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-04-24T23:15Z
KEV added
2024-04-24 · due 2024-05-01
Affected products (267)
ProductVersionsFixed in
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/adaptive_security_appliance_softwareall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
cisco/secure_firewall_threat_defenseall versions—
References (4)
EPSS history
Timeline
  • 24 APR 18:16Z
    A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security…
    cvelistv5
  • 24 APR 00:00Z
    Added to CISA KEV — remediate by May 1
    kev