Medium · published April 24, 2024
CVSS calls it medium at 6.0. It is confirmed in active exploitation. It sits in the 97.4th percentile for exploit probability.
⚠️ An authenticated local attacker can copy a crafted file, leading to arbitrary code execution on Cisco devices. Think of it as a tech-savvy intruder slipping a malicious blueprint into your trusted construction plan! 🔥 Imagine a contractor who finds a way to replace a legitimate building plan with a deceptive one that allows them to modify the structure without anyone noticing. Once that blueprint is in play, it can reshape the entire building! If exploited, this vulnerability allows an attacker to execute arbitrary code with root-level privileges on the affected Cisco devices. This means they could alter critical system behaviors, potentially leading to unauthorized access or data manipulation, all while lurking in the shadows after the next reboot.
Imagine a contractor who finds a way to replace a legitimate building plan with a deceptive one that allows them to modify the structure without anyone noticing. Once that blueprint is in play, it can reshape the entire building! The vulnerability comes from improper validation of files read from system flash memory in Cisco ASA and FTD Software. An attacker with administrator access can exploit this by placing a specially crafted file on the device's disk0: file system.
If exploited, this vulnerability allows an attacker to execute arbitrary code with root-level privileges on the affected Cisco devices. This means they could alter critical system behaviors, potentially leading to unauthorized access or data manipulation, all while lurking in the shadows after the next reboot. To protect your infrastructure, immediately ensure that your Cisco ASA and FTD Software are updated to the latest patched version. Conduct a thorough audit of your flash memory files and restrict access to only necessary personnel to limit exploitation risks. You've got this! With these steps, you'll be on your way to reinforcing your defenses in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/adaptive_security_appliance_software | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |