CVE-2024-20359

Cisco ASA and FTD Privilege Escalation Vulnerability — Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

Risk tier: Monitored

Description

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.

NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.

Scoring

  • CVSS: Not yet available
  • EPSS exploitation probability: Not yet available
  • EPSS percentile: Not yet available

CISA KEV status

  • Added to KEV: 2024-04-24
  • Remediation due date: 2024-05-01
  • Known ransomware campaign use: Unknown

All exploited vulnerabilities