CVE-2024-20359

Summary

CVE-2024-20359 is a newly identified vulnerability affecting Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software. This issue stems from a legacy capability that permits local authenticated attackers to preload VPN clients and plug-ins. By exploiting this vulnerability, an attacker can execute arbitrary code with root-level privileges, which requires administrator-level access. The root cause of this vulnerability lies in the improper validation of a file when it is read from the system flash memory. An attacker could take advantage of this weakness by crafting a malicious file and copying it to the disk0: file system of an affected device. A successful exploitation may result in the execution of arbitrary code on the device, enabling the attacker to modify system behavior and potentially persist after a reboot. Consequently, Cisco has upgraded the Security Impact Rating (SIR) of this advisory from Medium to High.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.