CVE-2024-20359

Published Apr 24, 2024 CVSS 3.1 · 6 Medium EPSS 18.8% KEV · Listed

Description

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability.

This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Adaptive Security Appliance (ASA) Software

affected

Version	Status	Constraints
`9.8.1`	affected	—
`9.8.1.5`	affected	—
`9.8.1.7`	affected	—
`9.8.2`	affected	—
`9.8.2.8`	affected	—
`9.8.2.14`	affected	—
`9.8.2.15`	affected	—
`9.8.2.17`	affected	—
`9.8.2.20`	affected	—
`9.8.2.24`	affected	—
`9.8.2.26`	affected	—
`9.8.2.28`	affected	—
`9.8.2.33`	affected	—
`9.8.2.35`	affected	—
`9.8.2.38`	affected	—
`9.8.3.8`	affected	—
`9.8.3.11`	affected	—
`9.8.3.14`	affected	—
`9.8.3.16`	affected	—
`9.8.3.18`	affected	—
`9.8.3.21`	affected	—
`9.8.3`	affected	—
`9.8.3.26`	affected	—
`9.8.3.29`	affected	—
`9.8.4`	affected	—
`9.8.4.3`	affected	—
`9.8.4.7`	affected	—
`9.8.4.8`	affected	—
`9.8.4.10`	affected	—
`9.8.4.12`	affected	—
`9.8.4.15`	affected	—
`9.8.4.17`	affected	—
`9.8.4.25`	affected	—
`9.8.4.20`	affected	—
`9.8.4.22`	affected	—
`9.8.4.26`	affected	—
`9.8.4.29`	affected	—
`9.8.4.32`	affected	—
`9.8.4.33`	affected	—
`9.8.4.34`	affected	—
`9.8.4.35`	affected	—
`9.8.4.39`	affected	—
`9.8.4.40`	affected	—
`9.8.4.41`	affected	—
`9.8.4.43`	affected	—
`9.8.4.44`	affected	—
`9.8.4.45`	affected	—
`9.8.4.46`	affected	—
`9.8.4.48`	affected	—
`9.12.1`	affected	—
`9.12.1.2`	affected	—
`9.12.1.3`	affected	—
`9.12.2`	affected	—
`9.12.2.4`	affected	—
`9.12.2.5`	affected	—
`9.12.2.9`	affected	—
`9.12.3`	affected	—
`9.12.3.2`	affected	—
`9.12.3.7`	affected	—
`9.12.4`	affected	—
`9.12.3.12`	affected	—
`9.12.3.9`	affected	—
`9.12.2.1`	affected	—
`9.12.4.2`	affected	—
`9.12.4.4`	affected	—
`9.12.4.7`	affected	—
`9.12.4.10`	affected	—
`9.12.4.13`	affected	—
`9.12.4.8`	affected	—
`9.12.4.18`	affected	—
`9.12.4.24`	affected	—
`9.12.4.26`	affected	—
`9.12.4.29`	affected	—
`9.12.4.30`	affected	—
`9.12.4.35`	affected	—
`9.12.4.37`	affected	—
`9.12.4.38`	affected	—
`9.12.4.39`	affected	—
`9.12.4.40`	affected	—
`9.12.4.41`	affected	—
`9.12.4.47`	affected	—
`9.12.4.48`	affected	—
`9.12.4.50`	affected	—
`9.12.4.52`	affected	—
`9.12.4.54`	affected	—
`9.12.4.55`	affected	—
`9.12.4.56`	affected	—
`9.12.4.58`	affected	—
`9.12.4.62`	affected	—
`9.12.4.65`	affected	—
`9.14.1`	affected	—
`9.14.1.10`	affected	—
`9.14.1.6`	affected	—
`9.14.1.15`	affected	—
`9.14.1.19`	affected	—
`9.14.1.30`	affected	—
`9.14.2`	affected	—
`9.14.2.4`	affected	—
`9.14.2.8`	affected	—
`9.14.2.13`	affected	—
`9.14.2.15`	affected	—
`9.14.3`	affected	—
`9.14.3.1`	affected	—
`9.14.3.9`	affected	—
`9.14.3.11`	affected	—
`9.14.3.13`	affected	—
`9.14.3.18`	affected	—
`9.14.3.15`	affected	—
`9.14.4`	affected	—
`9.14.4.6`	affected	—
`9.14.4.7`	affected	—
`9.14.4.12`	affected	—
`9.14.4.13`	affected	—
`9.14.4.14`	affected	—
`9.14.4.15`	affected	—
`9.14.4.17`	affected	—
`9.14.4.22`	affected	—
`9.14.4.23`	affected	—
`9.15.1`	affected	—
`9.15.1.7`	affected	—
`9.15.1.10`	affected	—
`9.15.1.15`	affected	—
`9.15.1.16`	affected	—
`9.15.1.17`	affected	—
`9.15.1.1`	affected	—
`9.15.1.21`	affected	—
`9.16.1`	affected	—
`9.16.1.28`	affected	—
`9.16.2`	affected	—
`9.16.2.3`	affected	—
`9.16.2.7`	affected	—
`9.16.2.11`	affected	—
`9.16.2.13`	affected	—
`9.16.2.14`	affected	—
`9.16.3`	affected	—
`9.16.3.3`	affected	—
`9.16.3.14`	affected	—
`9.16.3.15`	affected	—
`9.16.3.19`	affected	—
`9.16.3.23`	affected	—
`9.16.4`	affected	—
`9.16.4.9`	affected	—
`9.16.4.14`	affected	—
`9.16.4.18`	affected	—
`9.16.4.19`	affected	—
`9.16.4.27`	affected	—
`9.16.4.38`	affected	—
`9.16.4.39`	affected	—
`9.16.4.42`	affected	—
`9.16.4.48`	affected	—
`9.16.4.55`	affected	—
`9.17.1`	affected	—
`9.17.1.7`	affected	—
`9.17.1.9`	affected	—
`9.17.1.10`	affected	—
`9.17.1.11`	affected	—
`9.17.1.13`	affected	—
`9.17.1.15`	affected	—
`9.17.1.20`	affected	—
`9.17.1.30`	affected	—
`9.17.1.33`	affected	—
`9.18.1`	affected	—
`9.18.1.3`	affected	—
`9.18.2`	affected	—
`9.18.2.5`	affected	—
`9.18.2.7`	affected	—
`9.18.2.8`	affected	—
`9.18.3`	affected	—
`9.18.3.39`	affected	—
`9.18.3.46`	affected	—
`9.18.3.53`	affected	—
`9.18.3.55`	affected	—
`9.18.3.56`	affected	—
`9.18.4`	affected	—
`9.18.4.5`	affected	—
`9.18.4.8`	affected	—
`9.19.1`	affected	—
`9.19.1.5`	affected	—
`9.19.1.9`	affected	—
`9.19.1.12`	affected	—
`9.19.1.18`	affected	—
`9.19.1.22`	affected	—
`9.19.1.24`	affected	—
`9.19.1.27`	affected	—
`9.20.1`	affected	—
`9.20.1.5`	affected	—
`9.20.2`	affected	—

Cisco

Cisco Firepower Threat Defense Software

affected

Version	Status	Constraints
`6.2.3`	affected	—
`6.2.3.1`	affected	—
`6.2.3.2`	affected	—
`6.2.3.3`	affected	—
`6.2.3.4`	affected	—
`6.2.3.5`	affected	—
`6.2.3.6`	affected	—
`6.2.3.7`	affected	—
`6.2.3.8`	affected	—
`6.2.3.10`	affected	—
`6.2.3.11`	affected	—
`6.2.3.9`	affected	—
`6.2.3.12`	affected	—
`6.2.3.13`	affected	—
`6.2.3.14`	affected	—
`6.2.3.15`	affected	—
`6.2.3.16`	affected	—
`6.2.3.17`	affected	—
`6.2.3.18`	affected	—
`6.6.0`	affected	—
`6.6.0.1`	affected	—
`6.6.1`	affected	—
`6.6.3`	affected	—
`6.6.4`	affected	—
`6.6.5`	affected	—
`6.6.5.1`	affected	—
`6.6.5.2`	affected	—
`6.6.7`	affected	—
`6.6.7.1`	affected	—
`6.4.0`	affected	—
`6.4.0.1`	affected	—
`6.4.0.3`	affected	—
`6.4.0.2`	affected	—
`6.4.0.4`	affected	—
`6.4.0.5`	affected	—
`6.4.0.6`	affected	—
`6.4.0.7`	affected	—
`6.4.0.8`	affected	—
`6.4.0.9`	affected	—
`6.4.0.10`	affected	—
`6.4.0.11`	affected	—
`6.4.0.12`	affected	—
`6.4.0.13`	affected	—
`6.4.0.14`	affected	—
`6.4.0.15`	affected	—
`6.4.0.16`	affected	—
`6.4.0.17`	affected	—
`6.7.0`	affected	—
`6.7.0.1`	affected	—
`6.7.0.2`	affected	—
`6.7.0.3`	affected	—
`7.0.0`	affected	—
`7.0.0.1`	affected	—
`7.0.1`	affected	—
`7.0.1.1`	affected	—
`7.0.2`	affected	—
`7.0.2.1`	affected	—
`7.0.3`	affected	—
`7.0.4`	affected	—
`7.0.5`	affected	—
`7.0.6`	affected	—
`7.0.6.1`	affected	—
`7.1.0`	affected	—
`7.1.0.1`	affected	—
`7.1.0.2`	affected	—
`7.1.0.3`	affected	—
`7.2.0`	affected	—
`7.2.0.1`	affected	—
`7.2.1`	affected	—
`7.2.2`	affected	—
`7.2.3`	affected	—
`7.2.4`	affected	—
`7.2.4.1`	affected	—
`7.2.5`	affected	—
`7.2.5.1`	affected	—
`7.3.0`	affected	—
`7.3.1`	affected	—
`7.3.1.1`	affected	—
`7.4.0`	affected	—
`7.4.1`	affected	—

Configuration 1 [-]

OR	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.1.5:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.1.7:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.8:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.14:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.15:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.17:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.20:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.24:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.26:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.28:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.33:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.35:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.2.38:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.8:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.11:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.14:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.16:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.18:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.21:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.26:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.3.29:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.3:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.7:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.8:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.10:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.12:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.15:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.17:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.20:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.22:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.25:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.26:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.29:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.32:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.33:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.34:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.35:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.39:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.40:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.41:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.43:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.44:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.45:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.46:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.8.4.48:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.1.3:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.4:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.5:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.2.9:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.7:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.9:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.3.12:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.2:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.4:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.7:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.8:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.10:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.13:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.18:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.24:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.26:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.29:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.30:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.35:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.37:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.38:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.39:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.40:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.41:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.47:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.48:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.50:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.52:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.54:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.55:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.56:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.58:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.62:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.12.4.65:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.6:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.10:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.15:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.19:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.1.30:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.4:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.8:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.13:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.2.15:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.1:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.9:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.11:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.13:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.15:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.3.18:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4.6:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4.7:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4.12:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4.13:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4.14:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4.15:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4.17:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4.22:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.14.4.23:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.1:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.7:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.10:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.15:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.16:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.17:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.15.1.21:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.1.28:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.3:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.7:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.11:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.13:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.2.14:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.3:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.14:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.15:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.19:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.3.23:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.9:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.14:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.18:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.19:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.27:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.38:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.39:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.42:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.48:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.16.4.55:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.7:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.11:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.15:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.20:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.30:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.33:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.5:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.7:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.2.8:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.39:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.46:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.53:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.55:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.3.56:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.5:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.4.8:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.5:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.9:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.12:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.18:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.22:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.24:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.19.1.27:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.1.5:::::::*
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.20.2:::::::*

Configuration 2 [-]

OR	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.2:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.3:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.4:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.5:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.6:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.7:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.8:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.9:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.10:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.11:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.12:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.13:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.14:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.15:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.16:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.17:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.18:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.2:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.3:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.4:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.5:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.6:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.7:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.8:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.9:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.10:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.11:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.12:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.13:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.14:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.15:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.16:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.17:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.2:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.2:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.3:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.3:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.4:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.5:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.6:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.6.1:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0:::::::*
	cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.1:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.2:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.3:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0.1:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.1:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.2:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.3:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4.1:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.1:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.0:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.1:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:::::::*
cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:::::::*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-18074	A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability. This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is in the KEV database since April 24, 2024.

Exploit prediction score: 18.8% (18.816% probability within 30 days)

Exploitation active

Automatable no

Technical Impact partial

References

Link	Providers
https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20359

History

Aug 11, 2026 8:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco secure Firewall Threat Defense
CPEs	cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.10:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.11:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.12:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.13:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.14:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.15:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.16:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.17:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.18:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.2:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.3:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.4:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.5:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.6:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.7:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.8:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3.9:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.2.3:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.10:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.11:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.12:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.13:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.14:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.15:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.16:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.17:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.2:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.3:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.4:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.5:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.6:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.7:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.8:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.9:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.4.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.0.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.3:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.4:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.5.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.5.2:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.5:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.7.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.6.7:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.7.0.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.7.0.2:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.7.0.3:::::::* cpe:2.3:a:cisco:firepower_threat_defense:6.7.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.1.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.2.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.2:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.3:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.4:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.5:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.6.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.0.6:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.2:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.3:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.1.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.2.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.2.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.2.2:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.2.3:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.2.4.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.2.4:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.2.5.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.2.5:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.3.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.3.1.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.3.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.4.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense:7.4.1:::::::*	cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.10:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.11:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.12:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.13:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.14:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.15:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.16:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.17:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.18:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.2:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.3:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.4:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.5:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.6:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.7:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.8:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.9:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.10:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.11:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.12:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.13:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.14:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.15:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.16:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.17:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.2:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.3:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.4:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.5:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.6:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.7:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.8:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.9:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.2:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.2:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0.3:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:6.7.0:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.0:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.2:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.3:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.4:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.5:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.6.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.0.6:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.2:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0.3:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.1.0:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.0:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.2:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.3:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.4:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.2.5:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.0:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.3.1:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.0:::::::* cpe:2.3:a:cisco:secure_firewall_threat_defense:7.4.1:::::::*
Vendors & Products	Cisco firepower Threat Defense	Cisco secure Firewall Threat Defense

Oct 21, 2025 11:30 PM Added references View changes

Type	Values Removed	Values Added
References		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20359

Oct 21, 2025 8:30 PM References updated View changes

Type	Values Removed	Values Added
References	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20359

Oct 21, 2025 7:30 PM Added references View changes

Type	Values Removed	Values Added
References		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20359

Jul 30, 2025 2:15 AM Added references View changes

Type	Values Removed	Values Added
References		https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/

Jul 29, 2025 9:15 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco asa Cisco firepower Threat Defense Software
CPEs		cpe:2.3:a:cisco:asa:9.12.1:::::::* cpe:2.3:a:cisco:asa:9.14.1:::::::* cpe:2.3:a:cisco:asa:9.15.1:::::::* cpe:2.3:a:cisco:asa:9.16.1:::::::* cpe:2.3:a:cisco:asa:9.17.1:::::::* cpe:2.3:a:cisco:asa:9.18.1:::::::* cpe:2.3:a:cisco:asa:9.19.1:::::::* cpe:2.3:a:cisco:asa:9.20.1:::::::* cpe:2.3:a:cisco:asa:9.8.1:::::::* cpe:2.3:a:cisco:firepower_threat_defense_software:6.2.3:::::::* cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense_software:6.6.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense_software:6.7.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.0:::::::* cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.0:::::::*
Vendors & Products		Cisco asa Cisco firepower Threat Defense Software
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`