PT-2024-3071 · Cisco · Cisco Asa+1

Published 2024-04-24 · Updated 2026-05-03 · CVE-2024-20359

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) (affected versions not specified) Cisco Firepower Threat Defense (FTD) (affected versions not specified)

Description A flaw exists in a legacy capability used for preloading VPN clients and plug-ins. The issue stems from improper validation of a file when it is read from system flash memory. An authenticated local attacker with administrator-level privileges could exploit this by copying a crafted file to the disk0: file system. Successful exploitation allows the execution of arbitrary code with root-level privileges following a device reload, which can alter system behavior and persist across reboots.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2024-03264

CVE-2024-20359

Affected Products

Cisco Asa

Cisco Ftd

References · 83

• 🔥 https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices · Exploit
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03264 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20359 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20359 · Vendor Advisory
• https://twitter.com/dansantanna/status/1784960985054507030 · Twitter Post
• https://twitter.com/transilienceai/status/1810134877687132468 · Twitter Post
• https://twitter.com/transilienceai/status/1810678305349099562 · Twitter Post
• https://t.me/true_secator/5676 · Telegram Post
• https://twitter.com/transilienceai/status/1799625498395287960 · Twitter Post
• https://t.me/aptreports/9425 · Telegram Post
• https://twitter.com/NickBla41002745/status/1785186008566558952 · Twitter Post
• https://twitter.com/inthewildio/status/1785309923066233151 · Twitter Post
• https://twitter.com/TheRecord_Media/status/1783221490634162401 · Twitter Post
• https://twitter.com/atoonk/status/1783272935354138766 · Twitter Post