Firetruck

CVE-2024-20353

KEV

Cisco ASA and FTD Denial of Service Vulnerability

View CVE record →
Vendor / Project
Cisco
Product
Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Date added
Apr 24, 2024
Due date
May 1, 2024
Known ransomware use
Unknown
CWEs
CWE-835

Description

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes