CVE-2024-20495

A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition on an...

CVE-2024-20494

CVE-2024-20494 affects Cisco ASA and Firepower Threat Defense (FTD) TLS cryptography during the TLS 1.3 handshake. The issue arises from improper data validation, allowing unauthenticated remote attackers to trigger a device reload via a crafted TLS 1.3 packet on a TLS 1.3-enabled listening socke...

CVE-2024-20494

A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

CVE-2024-20494

A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

CVE-2024-20493

A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to deny further VPN user authentications for several...

CVE-2024-20493

CVE-2024-20493 affects Cisco ASA (Adaptive Security Appliance) and Cisco FTD (Firepower Threat Defense) during the Remote Access SSL VPN authentication phase. The vulnerability stems from ineffective handling of memory resources in the authentication process, which can be triggered by crafted pac...

CVE-2024-20493

A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to deny further VPN user authentications for several...

CVE-2024-20485

Cisco ASA/FTD VPN web server vulnerability (CVE-2024-20485) allows an authenticated, local attacker to execute arbitrary code with root privileges after a next device reload. Root cause: improper validation of a file read from system flash memory; attacker can trigger via restoring a crafted back...

CVE-2024-20481

The CVE-2024-20481 entry concerns Cisco ASA/FTD Remote Access VPN (RAVPN) DoS from resource exhaustion. Affected components: ASA and FTD software; vulnerability arises when an unauthenticated, remote attacker sends a flood of VPN authentication requests, exhausting device resources and potentiall...

CVE-2024-20426

CVE-2024-20426 affects Cisco ASA and Cisco FTD (IKEv2). A vulnerability in IKEv2 input validation could allow an unauthenticated, remote attacker to cause a DoS by sending crafted IKEv2 traffic, potentially causing the device to reload. Cisco advisory states updates addressing the vulnerability h...

CVE-2024-20408

A vulnerability in the Dynamic Access Policies DAP feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly. To exploit this vulnerability, an attacker...

CVE-2024-20408

A vulnerability in the Dynamic Access Policies DAP feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly. To exploit this vulnerability, an attacker...

CVE-2024-20408

The CVE-2024-20408 entry concerns Cisco ASA and FTD Dynamic Access Policies (DAP). The vulnerability arises from improper validation of data in HTTPS POST requests to DAP, enabling an authenticated, remote attacker with valid VPN credentials to cause the device to reload, producing a DoS conditio...

CVE-2024-20402

A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This...

CVE-2024-20402

CVE-2024-20402 affects Cisco ASA (SSL VPN) and Cisco FTD (SSL VPN) where a logic error in SSL VPN memory management can be exploited by unauthenticated remote attackers to cause the device to reload, leading to a DoS. Affected components: SSL VPN handling on ASA/FTD software. Root cause: memory-m...

CVE-2024-20384

A vulnerability in the Network Service Group NSG feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flow...

CVE-2024-20384

CVE-2024-20384 affects Cisco ASA (Software) and Cisco FTD, where a logic error in the Network Service Group (NSG) ACL population could let an unauthenticated, remote attacker bypass ACLs and permit traffic that should be denied. The issue arises when NSG ACLs are populated on the device, enabling...

CVE-2024-20382

A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an affected...

CVE-2024-20382

A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an affected...

CVE-2024-20382

The CVE-2024-20382 issue affects Cisco ASA/FTD VPN Web Client Services. It arises from improper validation of user-supplied input to application endpoints, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack in the browser of a user visiting the affected de...