- Vendor / Project
- Cisco
- Product
- Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- Date added
- Apr 24, 2024
- Due date
- May 1, 2024
- Known ransomware use
- Unknown
- CWEs
- CWE-94
Description
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.