EXPOSURES › CVE-2024-20359
CVE-2024-20359
HIGH ⌖ ON CISA KEV · EXPLOITEDCisco ASA/FTD devices allow local privilege escalation from Administrator to root via CVE-2024-20359, enabling attackers to bypass admin controls and gain full system access.
This vulnerability allows local privilege escalation from Administrator to root on Cisco ASA and FTD devices, granting attackers full system control and bypassing administrative restrictions. DIB organizations must patch immediately to prevent unauthorized access to network security appliances, which could compromise the entire network perimeter and violate FedRAMP/NIST 800-171 requirements for system integrity.
Shame score — A known privilege escalation vulnerability that allows local access to root, though it requires local access rather than remote exploitation.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.
| PRODUCT | STATUS |
|---|---|
| AppDynamics GovAPM AppDynamics (a Cisco company) |
Authorized |
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |