CVE-2024-20358

CVSS 3.1 Score 6.0 of 10 (medium)

Details

Published Apr 24, 2024
Updated: Apr 30, 2024
CWE ID 78

Summary

CVE-2024-20358 is a vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality, affecting multiple products including Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software. The vulnerability allows an authenticated, local attacker with administrator-level privileges to execute arbitrary commands on the underlying operating system with root-level privileges. This occurs due to improper sanitization of a backup file at restore time. To remediate this vulnerability, organizations should apply the necessary patches or updates provided by Cisco. If exploited successfully, this vulnerability poses a high danger as it allows an attacker to gain unauthorized access and execute arbitrary commands on the affected device's Linux operating system with root privileges.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-20358 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options