CVE-2024-20509

Summary

CVE-2024-20509 is a newly identified vulnerability affecting the Cisco AnyConnect VPN server on Cisco Meraki MX and Z Series Teleworker Gateway devices. An unauthenticated, remote attacker can exploit this weakness by guessing a specific authentication handler and sending crafted HTTPS requests. This vulnerability stems from insufficient entropy in authentication handlers and a race condition during the VPN authentication process. A successful attack could result in hijacking an ongoing AnyConnect VPN session or causing a denial-of-service condition for individual users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.