Cisco Releases Security Updates Addressing ArcaneDoor, Vulnerabilities in Cisco Firewall Platforms

🗓️ 24 Apr 2024 12:00:00Reported by CISAType

cisa🔗 www.cisa.gov👁 84 Views

Cisco updates address ArcaneDoor vulnerabilities in ASA and FTD, urging users to apply updates.

Reporter	Title	Published	Views	Family All 56
ATTACKERKB	CVE-2024-20359	24 Apr 202400:00	–	attackerkb
ATTACKERKB	CVE-2024-20353	24 Apr 202400:00	–	attackerkb
ATTACKERKB	CVE-2024-20358	24 Apr 202420:15	–	attackerkb
BDU FSTEC	The vulnerabilities of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD), which manage microprogramming software-based network interfaces, allow attackers to cause service interruptions.	25 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) microprogramming software, related to improper code generation management, allows attackers to execute arbitrary code with root privileges.	25 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) arises due to the lack of measures taken to neutralize special elements used in the operating system commands. This vulnerability allows attackers to execute arbitrary commands with root privileges.	25 Apr 202400:00	–	bdu_fstec
Circl	CVE-2024-20353	24 Apr 202418:10	–	circl
Circl	CVE-2024-20358	24 Apr 202420:05	–	circl
Circl	CVE-2024-20359	24 Apr 202417:36	–	circl
CISA KEV Catalog	Cisco ASA and FTD Denial of Service Vulnerability	24 Apr 202400:00	–	cisa_kev

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm
cisa	www.cisa.gov/news-events/alerts/2024/04/24/cisa-adds-three-known-exploited-vulnerabilities-catalog
blog	www.blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/
sec	www.sec.cloudapps.cisco.com/security/center/resources/asa_ftd_attacks_event_response
cyber	www.cyber.gc.ca/en/news-events/cyber-activity-impacting-cisco-asa-vpns

24 Apr 2024 12:00Current

8High risk

Vulners AI Score8

CVSS 3.18.6

EPSS0.70686

SSVC

arcanedoor vulnerabilities cisco adaptive security appliances cisco firepower threat defense