UpHeron
All vulnerabilities

Servers and applications

CVE-2024-20329

A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as root. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by submitting crafted input when executing remote CLI commands over SSH. A successful exploit could…

Severity
Critical 9.9
Published
23 Oct 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • Version 9.19.1.18
  • Version 9.19.1.12
  • Version 9.19.1.9
  • Version 9.19.1.5
All 27 release lines
  • Version 9.17.1
  • Version 9.17.1.7
  • Version 9.17.1.9
  • Version 9.17.1.10
  • Version 9.17.1.11
  • Version 9.17.1.13
  • Version 9.17.1.15
  • Version 9.17.1.20
  • Version 9.17.1.30
  • Version 9.17.1.33
  • Version 9.18.1
  • Version 9.18.1.3
  • Version 9.18.2
  • Version 9.18.2.5
  • Version 9.18.2.7
  • Version 9.18.2.8
  • Version 9.18.3
  • Version 9.18.3.39
  • Version 9.18.3.46
  • Version 9.18.3.53
  • Version 9.18.3.55
  • Version 9.18.3.56
  • Version 9.19.1
  • Version 9.19.1.5
  • Version 9.19.1.9
  • Version 9.19.1.12
  • Version 9.19.1.18

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-20329
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-20329