PT-2024-4158 · Cisco · Cisco Ftd

Published 2024-05-22 · Updated 2024-05-22 · CVE-2024-20261

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A logic error in the file policy feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured file policy to block an encrypted archive file. This could be exploited by sending a crafted, encrypted archive file through the affected device, potentially allowing malware to be sent. The vulnerability is related to insufficient access control in the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2024-04642

CVE-2024-20261

Affected Products

Cisco Ftd

References · 8

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-archive-bypass-z4wQjwcN · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04642 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20261 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20261 · Vendor Advisory
• https://vuldb.com/?id.265950 · Note
• https://twitter.com/linuxpatch/status/1793357636844527892 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1793350515486609555 · Twitter Post
• https://twitter.com/CVEnew/status/1793384163858436214 · Twitter Post