VulnCheck KEV: CVE-2024-20481

🗓️ 23 Oct 2024 00:00:00Reported by VulnCheckType

Cisco ASA and Firepower Threat Defense have a missing resource release after lifetime enabling unauthenticated remote DoS on the RAVPN service.

Reporter	Title	Published	Views	Family All 20
ATTACKERKB	CVE-2024-20481	23 Oct 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Remote Access VPN service provided by microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a perpetrator to induce a service failure.	25 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-20481	23 Oct 202420:45	–	circl
CISA KEV Catalog	Cisco ASA and FTD Denial-of-Service Vulnerability	24 Oct 202400:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	24 Oct 202412:00	–	cisa
Cisco	Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability	23 Oct 202416:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Remote Access VPN Brute Force DoS (cisco-sa-asaftd-bf-dos-vDZhLqrW)	31 Oct 202400:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Software Remote Access VPN Brute Force DoS (cisco-sa-asaftd-bf-dos-vDZhLqrW)	31 Oct 202400:00	–	nessus
CNNVD	Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞	23 Oct 202400:00	–	cnnvd
CVE	CVE-2024-20481	23 Oct 202417:51	–	cve

Source	Link
console	www.console.vulncheck.com/cve/CVE-2024-20481
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW
cisa	www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
eclypsium	www.eclypsium.com/blog/cisco-asa-scanning-surge-cyberattack/

23 Oct 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.8

EPSS0.1575

SSVC