All vulnerabilities

Servers and applications

CVE-2024-20526

A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for the SSH server of an affected device. This vulnerability is due to a logic error when an SSH session is established. An attacker could exploit this vulnerability by sending crafted SSH messages to an affected…

Severity
Medium 5.3
Published
23 Oct 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • Version 9.16.4.67
  • Version 9.16.4.70
  • Version 9.18.4.40
  • Version 9.20.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-20526
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-20526