CVE-2024-20359—Cisco ASA and FTD Privilege Escalation Vulnerability

漏洞名称

Cisco ASA and FTD Privilege Escalation Vulnerability

描述

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h
• https://nvd.nist.gov/vuln/detail/CVE-2024-20359

相关新闻文章

• Cisco: Actively exploited firewall flaws now abused for DoS attacksNovember 7, 2025
• CISA orders agencies to patch Cisco flaws exploited in zero-day attacksSeptember 25, 2025
• Cisco warns of backdoor admin account in Smart Licensing UtilitySeptember 4, 2024
• Cisco SSM On-Prem bug lets hackers change any user's passwordJuly 17, 2024
• Cisco warns of NX-OS zero-day exploited to deploy custom malwareJuly 1, 2024

相关 CWE

• CWE-94