SB2024042463 - Code execution in Cisco Adaptive Security Appliance and Firepower Threat Defense
Published: April 24, 2024 Updated: April 25, 2024
Security Bulletin ID
SB2024042463
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Code Injection (CVE-ID: CVE-2024-20359)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to improper input validation in a legacy capability that allowed for the preloading of VPN clients and plug-ins. A local user can copy a crafted file to the disk0: file system of an affected device and execute arbitrary code with root privileges.
Note, the vulnerability is being actively exploited in the wild.
Remediation
Install update from vendor's website.