CVE-2024-20384: Medium severity Cisco Adaptive Security Appliance (ASA) software vulnerability
Published Oct 23, 2024
·Updated
A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules.
Affected Software
112 affected components
Cisco Adaptive Security Appliance (ASA) software
Cisco Firepower Threat Defense (FTD) software
Cisco Adaptive Security Appliance Software=9.16.1
Cisco Adaptive Security Appliance Software=9.16.1.28
Cisco Adaptive Security Appliance Software=9.16.2
Cisco Adaptive Security Appliance Software=9.16.2.3
Cisco Adaptive Security Appliance Software=9.16.2.7
Cisco Adaptive Security Appliance Software=9.16.2.11
Cisco Adaptive Security Appliance Software=9.16.2.13
Cisco Adaptive Security Appliance Software=9.16.2.14
Cisco Adaptive Security Appliance Software=9.16.3
Cisco Adaptive Security Appliance Software=9.16.3.3
Cisco Adaptive Security Appliance Software=9.16.3.14
Cisco Adaptive Security Appliance Software=9.16.3.15
Cisco Adaptive Security Appliance Software=9.16.3.19
Cisco Adaptive Security Appliance Software=9.16.3.23
Cisco Adaptive Security Appliance Software=9.16.4
Cisco Adaptive Security Appliance Software=9.16.4.9
Cisco Adaptive Security Appliance Software=9.16.4.14
Cisco Adaptive Security Appliance Software=9.16.4.18
Cisco Adaptive Security Appliance Software=9.16.4.19
Cisco Adaptive Security Appliance Software=9.16.4.27
Cisco Adaptive Security Appliance Software=9.16.4.38
Cisco Adaptive Security Appliance Software=9.16.4.39
Cisco Adaptive Security Appliance Software=9.16.4.42
Cisco Adaptive Security Appliance Software=9.16.4.48
Cisco Adaptive Security Appliance Software=9.16.4.55
Cisco Adaptive Security Appliance Software=9.16.4.57
Cisco Adaptive Security Appliance Software=9.16.4.61
Cisco Adaptive Security Appliance Software=9.17.1
Cisco Adaptive Security Appliance Software=9.17.1.7
Cisco Adaptive Security Appliance Software=9.17.1.9
Cisco Adaptive Security Appliance Software=9.17.1.10
Cisco Adaptive Security Appliance Software=9.17.1.11
Cisco Adaptive Security Appliance Software=9.17.1.13
Cisco Adaptive Security Appliance Software=9.17.1.15
Cisco Adaptive Security Appliance Software=9.17.1.20
Cisco Adaptive Security Appliance Software=9.17.1.30
Cisco Adaptive Security Appliance Software=9.17.1.33
Cisco Adaptive Security Appliance Software=9.17.1.39
Cisco Adaptive Security Appliance Software=9.18.1
Cisco Adaptive Security Appliance Software=9.18.1.3
Cisco Adaptive Security Appliance Software=9.18.2
Cisco Adaptive Security Appliance Software=9.18.2.5
Cisco Adaptive Security Appliance Software=9.18.2.7
Cisco Adaptive Security Appliance Software=9.18.2.8
Cisco Adaptive Security Appliance Software=9.18.3
Cisco Adaptive Security Appliance Software=9.18.3.39
Cisco Adaptive Security Appliance Software=9.18.3.46
Cisco Adaptive Security Appliance Software=9.18.3.53
Cisco Adaptive Security Appliance Software=9.18.3.55
Cisco Adaptive Security Appliance Software=9.18.3.56
Cisco Adaptive Security Appliance Software=9.18.4
Cisco Adaptive Security Appliance Software=9.18.4.5
Cisco Adaptive Security Appliance Software=9.18.4.8
Cisco Adaptive Security Appliance Software=9.18.4.22
Cisco Adaptive Security Appliance Software=9.18.4.24
Cisco Adaptive Security Appliance Software=9.18.4.29
Cisco Adaptive Security Appliance Software=9.19.1
Cisco Adaptive Security Appliance Software=9.19.1.5
Cisco Adaptive Security Appliance Software=9.19.1.9
Cisco Adaptive Security Appliance Software=9.19.1.12
Cisco Adaptive Security Appliance Software=9.19.1.18
Cisco Adaptive Security Appliance Software=9.19.1.22
Cisco Adaptive Security Appliance Software=9.19.1.24
Cisco Adaptive Security Appliance Software=9.19.1.27
Cisco Adaptive Security Appliance Software=9.19.1.28
Cisco Adaptive Security Appliance Software=9.19.1.31
Cisco Adaptive Security Appliance Software=9.20.1
Cisco Adaptive Security Appliance Software=9.20.1.5
Cisco Adaptive Security Appliance Software=9.20.2
Cisco Adaptive Security Appliance Software=9.20.2.10
Cisco Adaptive Security Appliance Software=9.20.2.21
Cisco Adaptive Security Appliance Software=9.20.2.22
Cisco Secure Firewall Threat Defense=7.0.0
Cisco Secure Firewall Threat Defense=7.0.0.1
Cisco Secure Firewall Threat Defense=7.0.1
Cisco Secure Firewall Threat Defense=7.0.1.1
Cisco Secure Firewall Threat Defense=7.0.2
Cisco Secure Firewall Threat Defense=7.0.2.1
Cisco Secure Firewall Threat Defense=7.0.3
Cisco Secure Firewall Threat Defense=7.0.4
Cisco Secure Firewall Threat Defense=7.0.5
Cisco Secure Firewall Threat Defense=7.0.6
Cisco Secure Firewall Threat Defense=7.0.6.1
Cisco Secure Firewall Threat Defense=7.0.6.2
Cisco Secure Firewall Threat Defense=7.1.0
Cisco Secure Firewall Threat Defense=7.1.0.1
Cisco Secure Firewall Threat Defense=7.1.0.2
Cisco Secure Firewall Threat Defense=7.1.0.3
Cisco Secure Firewall Threat Defense=7.2.0
Cisco Secure Firewall Threat Defense=7.2.0.1
Cisco Secure Firewall Threat Defense=7.2.1
Cisco Secure Firewall Threat Defense=7.2.2
Cisco Secure Firewall Threat Defense=7.2.3
Cisco Secure Firewall Threat Defense=7.2.4
Cisco Secure Firewall Threat Defense=7.2.4.1
Cisco Secure Firewall Threat Defense=7.2.5
Cisco Secure Firewall Threat Defense=7.2.5.1
Cisco Secure Firewall Threat Defense=7.2.5.2
Cisco Secure Firewall Threat Defense=7.2.6
Cisco Secure Firewall Threat Defense=7.2.7
Cisco Secure Firewall Threat Defense=7.2.8
Cisco Secure Firewall Threat Defense=7.2.8.1
Cisco Secure Firewall Threat Defense=7.3.0
Cisco Secure Firewall Threat Defense=7.3.1
Cisco Secure Firewall Threat Defense=7.3.1.1
Cisco Secure Firewall Threat Defense=7.3.1.2
Cisco Secure Firewall Threat Defense=7.4.0
Cisco Secure Firewall Threat Defense=7.4.1
Cisco Secure Firewall Threat Defense=7.4.1.1
Cisco Secure Firewall Threat Defense=7.4.2
Event History
Oct 23, 2024
CVE Published
via MITRE·05:32 PM
Data Sourced
via MITRE·05:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-20384?
CVE-2024-20384 has been assigned a high severity rating due to its potential to allow unauthorized access to restricted network traffic.
2
How do I fix CVE-2024-20384?
To mitigate CVE-2024-20384, it is recommended to update to the latest version of Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat Defense (FTD) Software that addresses this vulnerability.
3
Who is affected by CVE-2024-20384?
CVE-2024-20384 affects users of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software that utilize the Network Service Group feature.
4
What is the impact of CVE-2024-20384?
The impact of CVE-2024-20384 allows an unauthenticated remote attacker to bypass configured access control lists, leading to unauthorized access to network traffic.
5
Is there a workaround for CVE-2024-20384?
Currently, the recommended course of action for CVE-2024-20384 is to apply vendor patches rather than relying on workarounds.