Cyber Activity Impacting CISCO ASA VPNs - Canadian Centre for Cyber Security

cyber.gc.ca · Undated · Licence: not cleared; local research copy only

CVEs this report names

2 CVEs

CVE-2024-20353Cisco ASA and FTD Denial of Service Vulnerability
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVPublic exploitHigh · 8.6T1608.001Upload Malware T1190Exploit Public-Facing Application+2 more · 2 reports
69.8%Top 0.63%
85.0priority
CVE-2024-20359Cisco ASA and FTD Privilege Escalation Vulnerability
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVPublic exploitMedium · 6.0T1078Valid Accounts T1059Command and Scripting Interpreter+1 more · 2 reports
18.8%Top 2.7%
82.8priority

CVE-2024-20353- Cisco Adaptive Security Appliance and Firepower Threat Defense Software Web Services Denial of Service Vulnerability

CVE-2024-20359 - Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability

None

No passage in this report has been tied to an ATT&CK technique.