CVE-2024-20359

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2024-04-24

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-20359

⚡ RCE ◐ zero-day ⌖ exploited in the wild shame 65/100 rceexploited-in-wildzero-day

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.

Players implicated

Cisco Systems Inc. · vendor Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · product

Description

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.

Affected FedRAMP products 8 in the catalog

Product	Provider	Status	Match
Cisco Cloudlock for Government	Cisco Systems Inc.	Authorized	vendor-exact · 0.90
Cisco Meraki for Government	Cisco Systems Inc.	In Process	vendor-exact · 0.90
Cisco SD-WAN for Government	Cisco Systems Inc.	In Process	vendor-exact · 0.90
Cisco Umbrella for Government	Cisco Systems Inc.	In Process	vendor-exact · 0.90
Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government)	Cisco Systems Inc.	Authorized	vendor-exact · 0.90
Duo Federal	Duo Security (A Cisco Company)	Authorized	dex-judge · 0.95
WebEx Contact Center Enterprise for Government (WxCCE-G)	Cisco Systems Inc.	In Process	vendor-exact · 0.90
Webex for Government	Cisco Systems Inc.	Authorized	vendor-exact · 0.90