UpHeron
All vulnerabilities

Servers and applications

CVE-2024-20384

A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. This vulnerability is due to a logic error that occurs when NSG…

Severity
Medium 5.8
Published
23 Oct 2024
Last changed
11 Aug 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • Version 9.20.2.22
  • Version 9.20.2.21
  • Version 9.20.2.10
  • Version 9.20.2
All 72 release lines
  • Version 9.16.1
  • Version 9.16.1.28
  • Version 9.16.2
  • Version 9.16.2.3
  • Version 9.16.2.7
  • Version 9.16.2.11
  • Version 9.16.2.13
  • Version 9.16.2.14
  • Version 9.16.3
  • Version 9.16.3.3
  • Version 9.16.3.14
  • Version 9.16.3.15
  • Version 9.16.3.19
  • Version 9.16.3.23
  • Version 9.16.4
  • Version 9.16.4.9
  • Version 9.16.4.14
  • Version 9.16.4.18
  • Version 9.16.4.19
  • Version 9.16.4.27
  • Version 9.16.4.38
  • Version 9.16.4.39
  • Version 9.16.4.42
  • Version 9.16.4.48
  • Version 9.16.4.55
  • Version 9.16.4.57
  • Version 9.16.4.61
  • Version 9.17.1
  • Version 9.17.1.7
  • Version 9.17.1.9
  • Version 9.17.1.10
  • Version 9.17.1.11
  • Version 9.17.1.13
  • Version 9.17.1.15
  • Version 9.17.1.20
  • Version 9.17.1.30
  • Version 9.17.1.33
  • Version 9.17.1.39
  • Version 9.18.1
  • Version 9.18.1.3
  • Version 9.18.2
  • Version 9.18.2.5
  • Version 9.18.2.7
  • Version 9.18.2.8
  • Version 9.18.3
  • Version 9.18.3.39
  • Version 9.18.3.46
  • Version 9.18.3.53
  • Version 9.18.3.55
  • Version 9.18.3.56
  • Version 9.18.4
  • Version 9.18.4.5
  • Version 9.18.4.8
  • Version 9.18.4.22
  • Version 9.18.4.24
  • Version 9.18.4.29
  • Version 9.19.1
  • Version 9.19.1.5
  • Version 9.19.1.9
  • Version 9.19.1.12
  • Version 9.19.1.18
  • Version 9.19.1.22
  • Version 9.19.1.24
  • Version 9.19.1.27
  • Version 9.19.1.28
  • Version 9.19.1.31
  • Version 9.20.1
  • Version 9.20.1.5
  • Version 9.20.2
  • Version 9.20.2.10
  • Version 9.20.2.21
  • Version 9.20.2.22

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-20384
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-20384