VDB
BDU%3A2024-10811
BDU%3A2024-10811
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость функции удаленного доступа SSL VPN микропрограммного обеспечения межсетевых экранов Cisco Adaptive Security Appliance (ASA) и Cisco Firepower Threat Defense (FTD), позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco Systems Inc. | Firepower Threat Defense, Adaptive Security Appliance | |
| Cisco | Cisco Firepower Threat Defense Software | 6.4.0.7, 6.4.0.8, 6.6.0 |
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.16.1.28, 9.14.3.1, 9.12.4.29 |
Timeline
- Oct 23, 2024 CVE Published
- Oct 23, 2024 PoC Published
- Dec 6, 2024 CVE Updated
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-vpn-nyH3fhp advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-M446vbEO url
- Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication url