CVE-2024-20353—Cisco ASA and FTD Denial of Service Vulnerability

Vulnerability Name

Cisco ASA and FTD Denial of Service Vulnerability

Description

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2
• https://nvd.nist.gov/vuln/detail/CVE-2024-20353

Related News Articles

• Cisco: Actively exploited firewall flaws now abused for DoS attacksNovember 7, 2025
• CISA orders agencies to patch Cisco flaws exploited in zero-day attacksSeptember 25, 2025
• Cisco warns of backdoor admin account in Smart Licensing UtilitySeptember 4, 2024
• Cisco SSM On-Prem bug lets hackers change any user's passwordJuly 17, 2024
• Cisco warns of NX-OS zero-day exploited to deploy custom malwareJuly 1, 2024

Related Weaknesses

• CWE-835