What’s Vulnerable › Vulnerabilities
CVE-2024-20353: Cisco ASA and FTD Denial of Service Vulnerability
- Severity: high (CVSS 8.6 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2024-04-24
- EPSS: 69.8% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-04-24 · updated 2026-08-11
- Weakness: CWE-835
Description
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.
Summary
CVE-2024-20353 is a high-severity (CVSS 8.6) flaw in the management and VPN web servers of Cisco ASA and FTD Software, caused by incomplete error checking when parsing an HTTP header. An unauthenticated remote attacker can send a crafted HTTP request to force the device to reload, causing a denial of service. The flaw affects Cisco ASA Software and Cisco Firepower Threat Defense Software, and it is listed in CISA's Known Exploited Vulnerabilities catalog with active exploitation reported and a public exploit available. Apply the mitigations in Cisco's vendor instructions or discontinue use of the product if mitigations are unavailable.
تُعد CVE-2024-20353 ثغرة عالية الخطورة (CVSS 8.6) في خوادم الويب للإدارة وVPN في برمجيات Cisco ASA وFTD، سببها فحص أخطاء غير مكتمل عند تحليل ترويسة HTTP. يستطيع مهاجم بعيد غير مصادَق عليه إرسال طلب HTTP مصمم خصيصًا لإجبار الجهاز على إعادة التشغيل، ما يؤدي إلى حالة حجب خدمة (DoS). تؤثر الثغرة في Cisco ASA Software وCisco Firepower Threat Defense Software، وهي مدرجة في كتالوج CISA للثغرات المعروفة الاستغلال مع استغلال نشط واستغلال عام متاح. طبّق التخفيفات الواردة في تعليمات Cisco أو أوقف استخدام المنتج إذا لم تتوفر التخفيفات.
Affected products
- Cisco ASA Software: 9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.8, 9.8.2.14 (+181)
- Cisco Firepower Threat Defense Software: 6.2.3, 6.2.3.1, 6.2.3.2, 6.2.3.3, 6.2.3.4, 6.2.3.5 (+74)
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2
- https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20353
Get alerted when CVE-2024-20353 or the next vulnerability affects your stack