Cisco ASA and FTD Software SSL VPN Flaw (CVE-2024-20260) Allows Unauthenticated Remote DoS Across All Platforms
Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗
Cisco updated its advisory for CVE-2024-20260, a denial-of-service vulnerability in the VPN and management web servers of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. The original version covered only the ASAv and FTDv virtual models, but Cisco later found that all ASA and FTD platforms are affected. An unauthenticated, remote attacker can exhaust system memory or buffer blocks, which slows SSL VPN connection processing and eventually stops it. Cisco rates the Security Impact Rating as High, has released software updates, and states that no workarounds exist. The article does not report exploitation in the wild.
Technical Details
- The root cause is improper memory management for new incoming SSL/TLS connections.
- An attacker sends a large number of new SSL/TLS connections to the target device, depleting memory or buffers and causing a DoS condition.
- Memory and buffers are reclaimed only slowly once the attack traffic stops, so a manual reload may be required to restore operations quickly.
- The advisory is part of the October 2024 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
Remediation
- Apply the fixed software releases published by Cisco for ASA and FTD.
- No workarounds are available.
- Prioritize internet-facing devices with SSL VPN or the management web server enabled.
Linha do tempo
-
sec.cloudapps.cisco.com ↗ · pub. 23/09/2026 10:26 · coletado 19/10 18:02 primeiro registro só resumo do feed
Cisco ASA and FTD Software SSL VPN Flaw (CVE-2024-20260) Allows Unauthenticated Remote DoS Across All Platforms
ler a análise desta fonte ocultar
Cisco updated its advisory for CVE-2024-20260, a denial-of-service vulnerability in the VPN and management web servers of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. The original version covered only the ASAv and FTDv virtual models, but Cisco later found that all ASA and FTD platforms are affected. An unauthenticated, remote attacker can exhaust system memory or buffer blocks, which slows SSL VPN connection processing and eventually stops it. Cisco rates the Security Impact Rating as High, has released software updates, and states that no workarounds exist. The article does not report exploitation in the wild.
Technical Details
- The root cause is improper memory management for new incoming SSL/TLS connections.
- An attacker sends a large number of new SSL/TLS connections to the target device, depleting memory or buffers and causing a DoS condition.
- Memory and buffers are reclaimed only slowly once the attack traffic stops, so a manual reload may be required to restore operations quickly.
- The advisory is part of the October 2024 Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
Remediation
- Apply the fixed software releases published by Cisco for ASA and FTD.
- No workarounds are available.
- Prioritize internet-facing devices with SSL VPN or the management web server enabled.