CVE-2024-20353: Cisco ASA and FTD Denial of Service Vulnerability
Published Apr 24, 2024
·Updated
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.
Other sources
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.
— CISA
Affected Software
268 affected components
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Cisco Adaptive Security Appliance Software=9.8.1
Cisco Adaptive Security Appliance Software=9.8.1.5
Cisco Adaptive Security Appliance Software=9.8.1.7
Cisco Adaptive Security Appliance Software=9.8.2
Cisco Adaptive Security Appliance Software=9.8.2.8
Cisco Adaptive Security Appliance Software=9.8.2.14
Cisco Adaptive Security Appliance Software=9.8.2.15
Cisco Adaptive Security Appliance Software=9.8.2.17
Cisco Adaptive Security Appliance Software=9.8.2.20
Cisco Adaptive Security Appliance Software=9.8.2.24
Cisco Adaptive Security Appliance Software=9.8.2.26
Cisco Adaptive Security Appliance Software=9.8.2.28
Cisco Adaptive Security Appliance Software=9.8.2.33
Cisco Adaptive Security Appliance Software=9.8.2.35
Cisco Adaptive Security Appliance Software=9.8.2.38
Cisco Adaptive Security Appliance Software=9.8.3
Cisco Adaptive Security Appliance Software=9.8.3.8
Cisco Adaptive Security Appliance Software=9.8.3.11
Cisco Adaptive Security Appliance Software=9.8.3.14
Cisco Adaptive Security Appliance Software=9.8.3.16
Cisco Adaptive Security Appliance Software=9.8.3.18
Cisco Adaptive Security Appliance Software=9.8.3.21
Cisco Adaptive Security Appliance Software=9.8.3.26
Cisco Adaptive Security Appliance Software=9.8.3.29
Cisco Adaptive Security Appliance Software=9.8.4
Cisco Adaptive Security Appliance Software=9.8.4.3
Cisco Adaptive Security Appliance Software=9.8.4.7
Cisco Adaptive Security Appliance Software=9.8.4.8
Cisco Adaptive Security Appliance Software=9.8.4.10
Cisco Adaptive Security Appliance Software=9.8.4.12
Cisco Adaptive Security Appliance Software=9.8.4.15
Cisco Adaptive Security Appliance Software=9.8.4.17
Cisco Adaptive Security Appliance Software=9.8.4.20
Cisco Adaptive Security Appliance Software=9.8.4.22
Cisco Adaptive Security Appliance Software=9.8.4.25
Cisco Adaptive Security Appliance Software=9.8.4.26
Cisco Adaptive Security Appliance Software=9.8.4.29
Cisco Adaptive Security Appliance Software=9.8.4.32
Cisco Adaptive Security Appliance Software=9.8.4.33
Cisco Adaptive Security Appliance Software=9.8.4.34
Cisco Adaptive Security Appliance Software=9.8.4.35
Cisco Adaptive Security Appliance Software=9.8.4.39
Cisco Adaptive Security Appliance Software=9.8.4.40
Cisco Adaptive Security Appliance Software=9.8.4.41
Cisco Adaptive Security Appliance Software=9.8.4.43
Cisco Adaptive Security Appliance Software=9.8.4.44
Cisco Adaptive Security Appliance Software=9.8.4.45
Cisco Adaptive Security Appliance Software=9.8.4.46
Cisco Adaptive Security Appliance Software=9.8.4.48
Cisco Adaptive Security Appliance Software=9.12.1
Cisco Adaptive Security Appliance Software=9.12.1.2
Cisco Adaptive Security Appliance Software=9.12.1.3
Cisco Adaptive Security Appliance Software=9.12.2
Cisco Adaptive Security Appliance Software=9.12.2.1
Cisco Adaptive Security Appliance Software=9.12.2.4
Cisco Adaptive Security Appliance Software=9.12.2.5
Cisco Adaptive Security Appliance Software=9.12.2.9
Cisco Adaptive Security Appliance Software=9.12.3
Cisco Adaptive Security Appliance Software=9.12.3.2
Cisco Adaptive Security Appliance Software=9.12.3.7
Cisco Adaptive Security Appliance Software=9.12.3.9
Cisco Adaptive Security Appliance Software=9.12.3.12
Cisco Adaptive Security Appliance Software=9.12.4
Cisco Adaptive Security Appliance Software=9.12.4.2
Cisco Adaptive Security Appliance Software=9.12.4.4
Cisco Adaptive Security Appliance Software=9.12.4.7
Cisco Adaptive Security Appliance Software=9.12.4.8
Cisco Adaptive Security Appliance Software=9.12.4.10
Cisco Adaptive Security Appliance Software=9.12.4.13
Cisco Adaptive Security Appliance Software=9.12.4.18
Cisco Adaptive Security Appliance Software=9.12.4.24
Cisco Adaptive Security Appliance Software=9.12.4.26
Cisco Adaptive Security Appliance Software=9.12.4.29
Cisco Adaptive Security Appliance Software=9.12.4.30
Cisco Adaptive Security Appliance Software=9.12.4.35
Cisco Adaptive Security Appliance Software=9.12.4.37
Cisco Adaptive Security Appliance Software=9.12.4.38
Cisco Adaptive Security Appliance Software=9.12.4.39
Cisco Adaptive Security Appliance Software=9.12.4.40
Cisco Adaptive Security Appliance Software=9.12.4.41
Cisco Adaptive Security Appliance Software=9.12.4.47
Cisco Adaptive Security Appliance Software=9.12.4.48
Cisco Adaptive Security Appliance Software=9.12.4.50
Cisco Adaptive Security Appliance Software=9.12.4.52
Cisco Adaptive Security Appliance Software=9.12.4.54
Cisco Adaptive Security Appliance Software=9.12.4.55
Cisco Adaptive Security Appliance Software=9.12.4.56
Cisco Adaptive Security Appliance Software=9.12.4.58
Cisco Adaptive Security Appliance Software=9.12.4.62
Cisco Adaptive Security Appliance Software=9.12.4.65
Cisco Adaptive Security Appliance Software=9.14.1
Cisco Adaptive Security Appliance Software=9.14.1.6
Cisco Adaptive Security Appliance Software=9.14.1.10
Cisco Adaptive Security Appliance Software=9.14.1.15
Cisco Adaptive Security Appliance Software=9.14.1.19
Cisco Adaptive Security Appliance Software=9.14.1.30
Cisco Adaptive Security Appliance Software=9.14.2
Cisco Adaptive Security Appliance Software=9.14.2.4
Cisco Adaptive Security Appliance Software=9.14.2.8
Cisco Adaptive Security Appliance Software=9.14.2.13
Cisco Adaptive Security Appliance Software=9.14.2.15
Cisco Adaptive Security Appliance Software=9.14.3
Cisco Adaptive Security Appliance Software=9.14.3.1
Cisco Adaptive Security Appliance Software=9.14.3.9
Cisco Adaptive Security Appliance Software=9.14.3.11
Cisco Adaptive Security Appliance Software=9.14.3.13
Cisco Adaptive Security Appliance Software=9.14.3.15
Cisco Adaptive Security Appliance Software=9.14.3.18
Cisco Adaptive Security Appliance Software=9.14.4
Cisco Adaptive Security Appliance Software=9.14.4.6
Cisco Adaptive Security Appliance Software=9.14.4.7
Cisco Adaptive Security Appliance Software=9.14.4.12
Cisco Adaptive Security Appliance Software=9.14.4.13
Cisco Adaptive Security Appliance Software=9.14.4.14
Cisco Adaptive Security Appliance Software=9.14.4.15
Cisco Adaptive Security Appliance Software=9.14.4.17
Cisco Adaptive Security Appliance Software=9.14.4.22
Cisco Adaptive Security Appliance Software=9.14.4.23
Cisco Adaptive Security Appliance Software=9.15.1
Cisco Adaptive Security Appliance Software=9.15.1.1
Cisco Adaptive Security Appliance Software=9.15.1.7
Cisco Adaptive Security Appliance Software=9.15.1.10
Cisco Adaptive Security Appliance Software=9.15.1.15
Cisco Adaptive Security Appliance Software=9.15.1.16
Cisco Adaptive Security Appliance Software=9.15.1.17
Cisco Adaptive Security Appliance Software=9.15.1.21
Cisco Adaptive Security Appliance Software=9.16.1
Cisco Adaptive Security Appliance Software=9.16.1.28
Cisco Adaptive Security Appliance Software=9.16.2
Cisco Adaptive Security Appliance Software=9.16.2.3
Cisco Adaptive Security Appliance Software=9.16.2.7
Cisco Adaptive Security Appliance Software=9.16.2.11
Cisco Adaptive Security Appliance Software=9.16.2.13
Cisco Adaptive Security Appliance Software=9.16.2.14
Cisco Adaptive Security Appliance Software=9.16.3
Cisco Adaptive Security Appliance Software=9.16.3.3
Cisco Adaptive Security Appliance Software=9.16.3.14
Cisco Adaptive Security Appliance Software=9.16.3.15
Cisco Adaptive Security Appliance Software=9.16.3.19
Cisco Adaptive Security Appliance Software=9.16.3.23
Cisco Adaptive Security Appliance Software=9.16.4
Cisco Adaptive Security Appliance Software=9.16.4.9
Cisco Adaptive Security Appliance Software=9.16.4.14
Cisco Adaptive Security Appliance Software=9.16.4.18
Cisco Adaptive Security Appliance Software=9.16.4.19
Cisco Adaptive Security Appliance Software=9.16.4.27
Cisco Adaptive Security Appliance Software=9.16.4.38
Cisco Adaptive Security Appliance Software=9.16.4.39
Cisco Adaptive Security Appliance Software=9.16.4.42
Cisco Adaptive Security Appliance Software=9.16.4.48
Cisco Adaptive Security Appliance Software=9.16.4.55
Cisco Adaptive Security Appliance Software=9.17.1
Cisco Adaptive Security Appliance Software=9.17.1.7
Cisco Adaptive Security Appliance Software=9.17.1.9
Cisco Adaptive Security Appliance Software=9.17.1.10
Cisco Adaptive Security Appliance Software=9.17.1.11
Cisco Adaptive Security Appliance Software=9.17.1.13
Cisco Adaptive Security Appliance Software=9.17.1.15
Cisco Adaptive Security Appliance Software=9.17.1.20
Cisco Adaptive Security Appliance Software=9.17.1.30
Cisco Adaptive Security Appliance Software=9.17.1.33
Cisco Adaptive Security Appliance Software=9.18.1
Cisco Adaptive Security Appliance Software=9.18.1.3
Cisco Adaptive Security Appliance Software=9.18.2
Cisco Adaptive Security Appliance Software=9.18.2.5
Cisco Adaptive Security Appliance Software=9.18.2.7
Cisco Adaptive Security Appliance Software=9.18.2.8
Cisco Adaptive Security Appliance Software=9.18.3
Cisco Adaptive Security Appliance Software=9.18.3.39
Cisco Adaptive Security Appliance Software=9.18.3.46
Cisco Adaptive Security Appliance Software=9.18.3.53
Cisco Adaptive Security Appliance Software=9.18.3.55
Cisco Adaptive Security Appliance Software=9.18.3.56
Cisco Adaptive Security Appliance Software=9.18.4
Cisco Adaptive Security Appliance Software=9.18.4.5
Cisco Adaptive Security Appliance Software=9.18.4.8
Cisco Adaptive Security Appliance Software=9.19.1
Cisco Adaptive Security Appliance Software=9.19.1.5
Cisco Adaptive Security Appliance Software=9.19.1.9
Cisco Adaptive Security Appliance Software=9.19.1.12
Cisco Adaptive Security Appliance Software=9.19.1.18
Cisco Adaptive Security Appliance Software=9.19.1.22
Cisco Adaptive Security Appliance Software=9.19.1.24
Cisco Adaptive Security Appliance Software=9.19.1.27
Cisco Adaptive Security Appliance Software=9.20.1
Cisco Adaptive Security Appliance Software=9.20.1.5
Cisco Adaptive Security Appliance Software=9.20.2
Cisco Secure Firewall Threat Defense=6.2.3
Cisco Secure Firewall Threat Defense=6.2.3.1
Cisco Secure Firewall Threat Defense=6.2.3.2
Cisco Secure Firewall Threat Defense=6.2.3.3
Cisco Secure Firewall Threat Defense=6.2.3.4
Cisco Secure Firewall Threat Defense=6.2.3.5
Cisco Secure Firewall Threat Defense=6.2.3.6
Cisco Secure Firewall Threat Defense=6.2.3.7
Cisco Secure Firewall Threat Defense=6.2.3.8
Cisco Secure Firewall Threat Defense=6.2.3.9
Cisco Secure Firewall Threat Defense=6.2.3.10
Cisco Secure Firewall Threat Defense=6.2.3.11
Cisco Secure Firewall Threat Defense=6.2.3.12
Cisco Secure Firewall Threat Defense=6.2.3.13
Cisco Secure Firewall Threat Defense=6.2.3.14
Cisco Secure Firewall Threat Defense=6.2.3.15
Cisco Secure Firewall Threat Defense=6.2.3.16
Cisco Secure Firewall Threat Defense=6.2.3.17
Cisco Secure Firewall Threat Defense=6.2.3.18
Cisco Secure Firewall Threat Defense=6.4.0
Cisco Secure Firewall Threat Defense=6.4.0.1
Cisco Secure Firewall Threat Defense=6.4.0.2
Cisco Secure Firewall Threat Defense=6.4.0.3
Cisco Secure Firewall Threat Defense=6.4.0.4
Cisco Secure Firewall Threat Defense=6.4.0.5
Cisco Secure Firewall Threat Defense=6.4.0.6
Cisco Secure Firewall Threat Defense=6.4.0.7
Cisco Secure Firewall Threat Defense=6.4.0.8
Cisco Secure Firewall Threat Defense=6.4.0.9
Cisco Secure Firewall Threat Defense=6.4.0.10
Cisco Secure Firewall Threat Defense=6.4.0.11
Cisco Secure Firewall Threat Defense=6.4.0.12
Cisco Secure Firewall Threat Defense=6.4.0.13
Cisco Secure Firewall Threat Defense=6.4.0.14
Cisco Secure Firewall Threat Defense=6.4.0.15
Cisco Secure Firewall Threat Defense=6.4.0.16
Cisco Secure Firewall Threat Defense=6.4.0.17
Cisco Secure Firewall Threat Defense=6.6.0
Cisco Secure Firewall Threat Defense=6.6.0.1
Cisco Secure Firewall Threat Defense=6.6.1
Cisco Secure Firewall Threat Defense=6.6.3
Cisco Secure Firewall Threat Defense=6.6.4
Cisco Secure Firewall Threat Defense=6.6.5
Cisco Secure Firewall Threat Defense=6.6.5.1
Cisco Secure Firewall Threat Defense=6.6.5.2
Cisco Secure Firewall Threat Defense=6.6.7
Cisco Secure Firewall Threat Defense=6.6.7.1
Cisco Secure Firewall Threat Defense=6.7.0
Cisco Secure Firewall Threat Defense=6.7.0.1
Cisco Secure Firewall Threat Defense=6.7.0.2
Cisco Secure Firewall Threat Defense=6.7.0.3
Cisco Secure Firewall Threat Defense=7.0.0
Cisco Secure Firewall Threat Defense=7.0.0.1
Cisco Secure Firewall Threat Defense=7.0.1
Cisco Secure Firewall Threat Defense=7.0.1.1
Cisco Secure Firewall Threat Defense=7.0.2
Cisco Secure Firewall Threat Defense=7.0.2.1
Cisco Secure Firewall Threat Defense=7.0.3
Cisco Secure Firewall Threat Defense=7.0.4
Cisco Secure Firewall Threat Defense=7.0.5
Cisco Secure Firewall Threat Defense=7.0.6
Cisco Secure Firewall Threat Defense=7.0.6.1
Cisco Secure Firewall Threat Defense=7.1.0
Cisco Secure Firewall Threat Defense=7.1.0.1
Cisco Secure Firewall Threat Defense=7.1.0.2
Cisco Secure Firewall Threat Defense=7.1.0.3
Cisco Secure Firewall Threat Defense=7.2.0
Cisco Secure Firewall Threat Defense=7.2.0.1
Cisco Secure Firewall Threat Defense=7.2.1
Cisco Secure Firewall Threat Defense=7.2.2
Cisco Secure Firewall Threat Defense=7.2.3
Cisco Secure Firewall Threat Defense=7.2.4
Cisco Secure Firewall Threat Defense=7.2.4.1
Cisco Secure Firewall Threat Defense=7.2.5
Cisco Secure Firewall Threat Defense=7.2.5.1
Cisco Secure Firewall Threat Defense=7.3.0
Cisco Secure Firewall Threat Defense=7.3.1
Cisco Secure Firewall Threat Defense=7.3.1.1
Cisco Secure Firewall Threat Defense=7.4.0
Cisco Secure Firewall Threat Defense=7.4.1
Event History
Apr 24, 2024
CVE Published
via CISA·12:00 AM
Known Exploited
via CISA·12:00 AM
News Published
via BleepingComputer·05:07 PM
News Published
via BleepingComputer·05:08 PM
CVE Published
via MITRE·06:15 PM
Data Sourced
via MITRE·06:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
News Published
via The Register·11:11 PM
News Published
via The Register·11:14 PM
May 16, 2024
News Published
via BleepingComputer·07:07 PM
Jul 1, 2024
News Published
via BleepingComputer·05:46 PM
Jul 17, 2024
News Published
via BleepingComputer·05:31 PM
Sep 4, 2024
News Published
via BleepingComputer·04:58 PM
Sep 25, 2025
News Published
via BleepingComputer·05:52 PM
Nov 7, 2025
News Published
via BleepingComputer·03:44 PM
Nov 13, 2025
News Published
via BleepingComputer·12:05 PM
Frequently Asked Questions
1
What are the potential impacts of CVE-2024-20353?
CVE-2024-20353 allows unauthenticated remote attackers to cause devices to unexpectedly reload, leading to denial of service.
2
How do I mitigate the risk associated with CVE-2024-20353?
To mitigate CVE-2024-20353, update your Cisco ASA or FTD to the fixed software versions provided by Cisco.
3
What versions of Cisco ASA and FTD are affected by CVE-2024-20353?
CVE-2024-20353 impacts specific versions of Cisco Adaptive Security Appliance (ASA) software and Cisco Firepower Threat Defense (FTD) software.
4
What should I do if my devices are vulnerable due to CVE-2024-20353?
If your devices are vulnerable under CVE-2024-20353, apply the vendor's recommended patches or software updates immediately.
5
Is CVE-2024-20353 actively being exploited in the wild?
Yes, reports indicate that CVE-2024-20353 is actively being exploited by hackers in targeted attacks.