GCVE-110-NCSC-2024-424

Advisory PublishedCVSS 8.6/10

Vulnetix · Advisory published October 24, 2024

Cisco heeft kwetsbaarheden verholpen in Adaptive Security Appliance (ASA) en Firepower Threat Defense (FTD).

Weaknesses (CWE)

CWE-400Uncontrolled Resource ConsumptionCWE-1287Improper Validation of Specified Type of InputCWE-20Improper Input ValidationCWE-476NULL Pointer DereferenceCWE-788Access of Memory Location After End of BufferCWE-290Authentication Bypass by SpoofingCWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)CWE-146Improper Neutralization of Expression/Command DelimitersCWE-789Memory Allocation with Excessive Size Value

Risk Scores

CVSS 3.1

8.6/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
cisco	adaptive_security_appliance	—	—
cisco	firepower_threat_defense	—	—

Aliases

CVE-2024-20260 CVE-2024-20329 CVE-2024-20330 CVE-2024-20339 CVE-2024-20341 CVE-2024-20351 CVE-2024-20382 CVE-2024-20384 CVE-2024-20402 CVE-2024-20426 CVE-2024-20494 CVE-2024-20495

References

advisory

Browse GCVE Records

73,443 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON