Servers and applications
CVE-2024-20485
A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability. This vulnerability is due to improper validation of a specific file when it is read…
- Severity
- Medium 6.7
- Published
- 23 Oct 2024
- Last changed
- 11 Aug 2026
- Added to UpHeron
- 1 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software |
All 194 release lines
|