Summary

• Cisco released its semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication on October 23, 2024. 

  The October 23, 2024, release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication includes 35 Cisco Security Advisories that describe 51 vulnerabilities in Cisco ASA, FMC, and FTD. Cisco has released software updates that address these vulnerabilities.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  Cisco Adaptive Security Appliance Software SSH Remote Command Injection Vulnerability	CVE-2024-20329	Critical	9.9
  Cisco Secure Firewall Management Center Software Command Injection Vulnerability	CVE-2024-20424	Critical	9.9
  Cisco Firepower Threat Defense Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vulnerability	CVE-2024-20412	Critical	9.3
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software IKEv2 VPN Denial of Service Vulnerability	CVE-2024-20426	High	8.6
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Denial of Service Vulnerability	CVE-2024-20495	High	8.6
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Memory Management Denial of Service Vulnerability	CVE-2024-20402	High	8.6
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software TLS Denial of Service Vulnerability	CVE-2024-20494	High	8.6
  Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability	CVE-2024-20260	High	8.6
  Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TCP/IP Traffic with Snort 2 and Snort 3 Denial of Service Vulnerability	CVE-2024-20351	High	8.6
  Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series Appliances TCP UDP Snort 2 and Snort 3 Denial of Service Vulnerability	CVE-2024-20330	High	8.6
  Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability	CVE-2024-20339	High	8.6
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability	CVE-2024-20408	High	7.7
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software SNMP Denial of Service Vulnerability	CVE-2024-20268	High	7.7
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability	CVE-2024-20485	High	6
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability	CVE-2024-20331	Medium	6.8
  Cisco Secure Firewall Management Center Software Cluster Backup Command Injection Vulnerability	CVE-2024-20275	Medium	6.8
  Cisco Secure Firewall Management Center Privilege Escalation Vulnerability	CVE-2024-20482	Medium	6.5
  Cisco Secure Firewall Management Center Software Arbitrary File Read Vulnerability	CVE-2024-20379	Medium	6.5
  Cisco Secure Firewall Management Center Software Command Injection Vulnerability	CVE-2024-20374	Medium	6.5
  Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities	CVE-2024-20471 CVE-2024-20472 CVE-2024-20473	Medium	6.5
  Cisco Secure Firewall Management Center Software SQL Injection Vulnerability	CVE-2024-20340	Medium	6.5
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities	CVE-2024-20341 CVE-2024-20382	Medium	6.1
  Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerabilities	CVE-2024-20264 CVE-2024-20269 CVE-2024-20273 CVE-2024-20298 CVE-2024-20300 CVE-2024-20364 CVE-2024-20372 CVE-2024-20386 CVE-2024-20403 CVE-2024-20409 CVE-2024-20410 CVE-2024-20415	Medium	6.1
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability	CVE-2024-20370	Medium	6
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software AnyConnect Access Control List Bypass Vulnerabilities	CVE-2024-20297 CVE-2024-20299	Medium	5.8
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software NSG Access Control List Bypass Vulnerability	CVE-2024-20384	Medium	5.8
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access VPN Brute Force Denial of Service Vulnerability	CVE-2024-20481	Medium	5.8
  Cisco Firepower Threat Defense Software Geolocation ACL Bypass Vulnerability	CVE-2024-20431	Medium	5.8
  Cisco Firepower Threat Defense Software TCP Snort 3 Detection Engine Bypass Vulnerability	CVE-2024-20407	Medium	5.8
  Multiple Cisco Products Snort Rate Filter Bypass Vulnerability	CVE-2024-20342	Medium	5.8
  Cisco Secure Firewall Management Center Software HTML Injection Vulnerability	CVE-2024-20274	Medium	5.5
  Cisco Secure Firewall Management Center Software Cross-Site Scripting and Information Disclosure Vulnerabilities	CVE-2024-20377 CVE-2024-20387 CVE-2024-20388	Medium	5.4
  Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability	CVE-2024-20493	Medium	5.3
  Cisco Adaptive Security Appliance Software SSH Server Resource Denial of Service Vulnerability	CVE-2024-20526	Medium	5.3
  Cisco Firepower Threat Defense Software Vulnerability Database with Snort Detection Engine Security Policy Bypass and Denial of Service Issue		Informational	0

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A