Cisco ASA/FTD Web Services Infinite Loop (CVE-2024-20353)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505549);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/21");

  script_cve_id("CVE-2024-20353");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2024/05/01");
  script_xref(name:"CEA-ID", value:"CEA-2024-0007");

  script_name(english:"Cisco ASA/FTD Web Services Infinite Loop (CVE-2024-20353)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"A vulnerability in the management and VPN web servers for Cisco
Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat
Defense (FTD) Software could allow an unauthenticated, remote attacker
to cause the device to reload unexpectedly, resulting in a denial of
service (DoS) condition. This vulnerability is due to incomplete error
checking when parsing an HTTP header. An attacker could exploit this
vulnerability by sending a crafted HTTP request to a targeted web
server on a device. A successful exploit could allow the attacker to
cause a DoS condition when the device reloads. Note: This
vulnerability was publicly disclosed in conjunction with the
ArcaneDoor state-sponsored espionage campaign that targeted
perimeter network devices.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?e9f57023");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-20353");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(835);

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/04/24");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/04/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/20");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:adaptive_security_appliance_software");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:firepower_threat_defense");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Cisco");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Cisco');

var asset = tenable_ot::assets::get(vendor:'Cisco');

var vuln_cpes = {
    "cpe:/o:cisco:adaptive_security_appliance_software:9.8_branch" :
        {"versionStartIncluding" : "9.8.1", "versionEndIncluding" : "9.8.4.48", "family" : "CiscoFirepower", "os" : "ASA"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.12_branch" :
        {"versionStartIncluding" : "9.12.1", "versionEndIncluding" : "9.12.4.65", "family" : "CiscoFirepower", "os" : "ASA"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.14_branch" :
        {"versionStartIncluding" : "9.14.1", "versionEndExcluding" : "9.14.4.23", "family" : "CiscoFirepower", "os" : "ASA"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.16_branch" :
        {"versionStartIncluding" : "9.16.1", "versionEndIncluding" : "9.16.4.55", "family" : "CiscoFirepower", "os" : "ASA"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.17_branch" :
        {"versionStartIncluding" : "9.17.1", "versionEndIncluding" : "9.17.1.33", "family" : "CiscoFirepower", "os" : "ASA"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.18_branch" :
        {"versionStartIncluding" : "9.18.1", "versionEndIncluding" : "9.18.4.8", "family" : "CiscoFirepower", "os" : "ASA"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.19_branch" :
        {"versionStartIncluding" : "9.19.1", "versionEndIncluding" : "9.19.1.27", "family" : "CiscoFirepower", "os" : "ASA"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.20_branch" :
        {"versionStartIncluding" : "9.20.1", "versionEndIncluding" : "9.20.2", "family" : "CiscoFirepower", "os" : "ASA"},
    "cpe:/o:cisco:firepower_threat_defense:6.2.3_branch" :
        {"versionStartIncluding" : "6.2.3", "versionEndIncluding" : "6.2.3.18", "family" : "CiscoFirepower", "os" : "FTD"},
    "cpe:/o:cisco:firepower_threat_defense:6.4.0_branch" :
        {"versionStartIncluding" : "6.4.0", "versionEndExcluding" : "6.4.0.17", "family" : "CiscoFirepower", "os" : "FTD"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);