Back to the CVE list
CVE-2024-20402

Vulnerability in Cisco Adaptive Security Appliance Software

CVSS score

8.6

EPSS probability

%0.5

Risk score

0.0

Published

1 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2024-20402 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to a logic error in memory management when the device is handling SSL VPN connections. An attacker could exploit this vulnerability by sending crafted SSL/TLS packets to the SSL VPN server of the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2024-20402 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1ciscoadaptive security appliance software View
2ciscoadaptive security appliance software View
3ciscoadaptive security appliance software View
4ciscoadaptive security appliance software View
5ciscoadaptive security appliance software View
6ciscoadaptive security appliance software View
7ciscoadaptive security appliance software View
8ciscoadaptive security appliance software View
9ciscoadaptive security appliance software View
10ciscoadaptive security appliance software View
11ciscoadaptive security appliance software View
12ciscoadaptive security appliance software View
13ciscoadaptive security appliance software View
14ciscoadaptive security appliance software View
15ciscoadaptive security appliance software View
16ciscoadaptive security appliance software View
17ciscoadaptive security appliance software View
18ciscoadaptive security appliance software View
19ciscoadaptive security appliance software View
20ciscoadaptive security appliance software View
21ciscoadaptive security appliance software View
22ciscoadaptive security appliance software View
23ciscoadaptive security appliance software View
24ciscoadaptive security appliance software View
25ciscoadaptive security appliance software View
26ciscoadaptive security appliance software View
27ciscoadaptive security appliance software View
28ciscoadaptive security appliance software View
29ciscoadaptive security appliance software View
30ciscoadaptive security appliance software View
31ciscoadaptive security appliance software View
32ciscoadaptive security appliance software View
33ciscoadaptive security appliance software View
34ciscoadaptive security appliance software View
35ciscoadaptive security appliance software View
36ciscoadaptive security appliance software View
37ciscoadaptive security appliance software View
38ciscoadaptive security appliance software View
39ciscoadaptive security appliance software View
40ciscoadaptive security appliance software View
41ciscoadaptive security appliance software View
42ciscoadaptive security appliance software View
43ciscoadaptive security appliance software View
44ciscoadaptive security appliance software View
45ciscoadaptive security appliance software View
46ciscoadaptive security appliance software View
47ciscoadaptive security appliance software View
48ciscoadaptive security appliance software View
49ciscoadaptive security appliance software View
50ciscoadaptive security appliance software View
51ciscoadaptive security appliance software View
52ciscoadaptive security appliance software View
53ciscoadaptive security appliance software View
54ciscoadaptive security appliance software View
55ciscoadaptive security appliance software View
56ciscoadaptive security appliance software View
57ciscoadaptive security appliance software View
58ciscoadaptive security appliance software View
59ciscoadaptive security appliance software View
60ciscoadaptive security appliance software View
61ciscoadaptive security appliance software View
62ciscoadaptive security appliance software View
63ciscoadaptive security appliance software View
64ciscoadaptive security appliance software View
65ciscoadaptive security appliance software View
66ciscoadaptive security appliance software View
67ciscoadaptive security appliance software View
68ciscoadaptive security appliance software View
69ciscoadaptive security appliance software View
70ciscoadaptive security appliance software View
71ciscoadaptive security appliance software View
72ciscoadaptive security appliance software View
73ciscoadaptive security appliance software View
74ciscoadaptive security appliance software View
75ciscoadaptive security appliance software View
76ciscoadaptive security appliance software View
77ciscoadaptive security appliance software View
78ciscoadaptive security appliance software View
79ciscoadaptive security appliance software View
80ciscoadaptive security appliance software View
81ciscoadaptive security appliance software View
82ciscoadaptive security appliance software View
83ciscoadaptive security appliance software View
84ciscoadaptive security appliance software View
85ciscoadaptive security appliance software View
86ciscoadaptive security appliance software View
87ciscoadaptive security appliance software View
88ciscoadaptive security appliance software View
89ciscoadaptive security appliance software View
90ciscoadaptive security appliance software View
91ciscoadaptive security appliance software View
92ciscoadaptive security appliance software View
93ciscoadaptive security appliance software View
94ciscoadaptive security appliance software View
95ciscoadaptive security appliance software View
96ciscoadaptive security appliance software View
97ciscoadaptive security appliance software View
98ciscoadaptive security appliance software View
99ciscoadaptive security appliance software View
100ciscoadaptive security appliance software View
101ciscoadaptive security appliance software View
102ciscoadaptive security appliance software View
103ciscoadaptive security appliance software View
104ciscoadaptive security appliance software View
105ciscoadaptive security appliance software View
106ciscoadaptive security appliance software View
107ciscoadaptive security appliance software View
108ciscoadaptive security appliance software View
109ciscoadaptive security appliance software View
110ciscoadaptive security appliance software View
111ciscoadaptive security appliance software View
112ciscoadaptive security appliance software View
113ciscoadaptive security appliance software View
114ciscoadaptive security appliance software View
115ciscoadaptive security appliance software View
116ciscoadaptive security appliance software View
117ciscoadaptive security appliance software View
118ciscoadaptive security appliance software View
119ciscoadaptive security appliance software View
120ciscoadaptive security appliance software View
121ciscoadaptive security appliance software View
122ciscoadaptive security appliance software View
123ciscoadaptive security appliance software View
124ciscoadaptive security appliance software View
125ciscoadaptive security appliance software View
126ciscoadaptive security appliance software View
127ciscoadaptive security appliance software View
128ciscoadaptive security appliance software View
129ciscoadaptive security appliance software View
130ciscoadaptive security appliance software View
131ciscoadaptive security appliance software View
132ciscoadaptive security appliance software View
133ciscoadaptive security appliance software View
134ciscoadaptive security appliance software View
135ciscoadaptive security appliance software View
136ciscoadaptive security appliance software View
137ciscoadaptive security appliance software View
138ciscoadaptive security appliance software View
139ciscoadaptive security appliance software View
140ciscoadaptive security appliance software View
141ciscoadaptive security appliance software View
142ciscoadaptive security appliance software View
143ciscoadaptive security appliance software View
144ciscoadaptive security appliance software View
145ciscoadaptive security appliance software View
146ciscoadaptive security appliance software View
147ciscoadaptive security appliance software View
148ciscoadaptive security appliance software View
149ciscoadaptive security appliance software View
150ciscoadaptive security appliance software View
151ciscoadaptive security appliance software View
152ciscoadaptive security appliance software View
153ciscoadaptive security appliance software View
154ciscoadaptive security appliance software View
155ciscoadaptive security appliance software View
156ciscoadaptive security appliance software View
157ciscoadaptive security appliance software View
158ciscoadaptive security appliance software View
159ciscoadaptive security appliance software View
160ciscoadaptive security appliance software View
161ciscoadaptive security appliance software View
162ciscoadaptive security appliance software View
163ciscoadaptive security appliance software View
164ciscoadaptive security appliance software View
165ciscoadaptive security appliance software View
166ciscoadaptive security appliance software View
167ciscoadaptive security appliance software View
168ciscoadaptive security appliance software View
169ciscoadaptive security appliance software View
170ciscoadaptive security appliance software View
171ciscoadaptive security appliance software View
172ciscoadaptive security appliance software View
173ciscoadaptive security appliance software View
174ciscoadaptive security appliance software View
175ciscoadaptive security appliance software View
176ciscoadaptive security appliance software View
177ciscoadaptive security appliance software View
178ciscoadaptive security appliance software View
179ciscoadaptive security appliance software View
180ciscoadaptive security appliance software View
181ciscoadaptive security appliance software View
182ciscoadaptive security appliance software View
183ciscoadaptive security appliance software View
184ciscoadaptive security appliance software View
185ciscoadaptive security appliance software View
186ciscoadaptive security appliance software View
187ciscoadaptive security appliance software View
188ciscoadaptive security appliance software View
189ciscoadaptive security appliance software View
190ciscoadaptive security appliance software View
191ciscoadaptive security appliance software View
192ciscoadaptive security appliance software View
193ciscoadaptive security appliance software View
194ciscoadaptive security appliance software View
195ciscoadaptive security appliance software View
196ciscosecure firewall threat defense View
197ciscosecure firewall threat defense View
198ciscosecure firewall threat defense View
199ciscosecure firewall threat defense View
200ciscosecure firewall threat defense View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.6CVSS V31HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-20402 is associated with the following CWEs:

CWE-788: Common Weakness Enumeration Entry CWE-788

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-20402 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-dos-hOnB9pH4vendor-advisory

CVSS Vector Radar Chart

8.6 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

C
cisco logo
cisco

Weakness Type (CWE & CAPEC)

CWE-788

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2024-20402"
CVE-2024-20402 · Vulnerability in Cisco Adaptive Security Appliance Software · DayBreach