Live › vulnerability › CVE-2024-20353
Go to dashboardCisco ASA and Firepower Threat Defense firewalls contain an infinite loop bug that an attacker can trigger remotely. Triggering it causes a denial of service, taking the device offline.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | vendor | – | – |
| cisco adaptive security appliance software | vendor | = 9.8.1 | – |
| cisco adaptive security appliance software | vendor | = 9.8.1.5 | – |
| cisco adaptive security appliance software | vendor | = 9.8.1.7 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.8 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.14 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.15 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.17 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.20 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.24 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.26 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.28 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.33 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.35 | – |
| cisco adaptive security appliance software | vendor | = 9.8.2.38 | – |
| cisco adaptive security appliance software | vendor | = 9.8.3 | – |
| cisco adaptive security appliance software | vendor | = 9.8.3.8 | – |
| cisco adaptive security appliance software | vendor | = 9.8.3.11 | – |
| cisco adaptive security appliance software | vendor | = 9.8.3.14 | – |
| cisco adaptive security appliance software | vendor | = 9.8.3.16 | – |
| cisco adaptive security appliance software | vendor | = 9.8.3.18 | – |
| cisco adaptive security appliance software | vendor | = 9.8.3.21 | – |
| cisco adaptive security appliance software | vendor | = 9.8.3.26 | – |
| cisco adaptive security appliance software | vendor | = 9.8.3.29 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.3 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.7 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.8 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.10 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.12 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.15 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.17 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.20 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.22 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.25 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.26 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.29 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.32 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.33 | – |
| cisco adaptive security appliance software | vendor | = 9.8.4.34 | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.
This page as .md · .json · in your agent: get_signal("CVE-2024-20353")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.