CVE-2024-20412: Critical severity Cisco Secure Firewall Threat Defense vulnerability

Published Oct 23, 2024

Updated

A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using static credentials. This vulnerability is due to the presence of static accounts with hard-coded passwords on an affected system. An attacker could exploit this vulnerability by logging in to the CLI of an affected device with these credentials. A successful exploit could allow the attacker to access the affected system and retrieve sensitive information, perform limited troubleshooting actions, modify some configuration options, or render the device unable to boot to the operating system, requiring a reimage of the device.

Affected Software

44 affected components

All of the following

Any of the following

Cisco Secure Firewall Threat Defense=7.1.0

Cisco Secure Firewall Threat Defense=7.1.0.1

Cisco Secure Firewall Threat Defense=7.1.0.2

Cisco Secure Firewall Threat Defense=7.1.0.3

Cisco Secure Firewall Threat Defense=7.2.0

Cisco Secure Firewall Threat Defense=7.2.0.1

Cisco Secure Firewall Threat Defense=7.2.1

Cisco Secure Firewall Threat Defense=7.2.2

Cisco Secure Firewall Threat Defense=7.2.3

Cisco Secure Firewall Threat Defense=7.2.4

Cisco Secure Firewall Threat Defense=7.2.4.1

Cisco Secure Firewall Threat Defense=7.2.5

Cisco Secure Firewall Threat Defense=7.2.5.1

Cisco Secure Firewall Threat Defense=7.2.5.2

Cisco Secure Firewall Threat Defense=7.2.6

Cisco Secure Firewall Threat Defense=7.2.7

Cisco Secure Firewall Threat Defense=7.3.0

Cisco Secure Firewall Threat Defense=7.3.1

Cisco Secure Firewall Threat Defense=7.3.1.1

Cisco Secure Firewall Threat Defense=7.3.1.2

Cisco Secure Firewall Threat Defense=7.4.0

Cisco Secure Firewall Threat Defense=7.4.1

Cisco Secure Firewall Threat Defense=7.4.1.1

Any of the following

Cisco Firepower 1000

Cisco Firepower 1010

Cisco Firepower 1020

Cisco Firepower 1030

Cisco Firepower 1040

Cisco Firepower 1120

Cisco Firepower 1140

Cisco Firepower 1150

Cisco Firepower 2100

Cisco Firepower 2110

Cisco Firepower 2120

Cisco Firepower 2130

Cisco Firepower 2140

Cisco Firepower 3105

Cisco Firepower 3110

Cisco Firepower 3120

Cisco Firepower 3130

Cisco Firepower 3140

Cisco Firepower 4215

Cisco Firepower 4225

Cisco Firepower 4245

Event History

Oct 23, 2024

CVE Published

via MITRE·05:39 PM

Data Sourced

via MITRE·05:39 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Oct 24, 2024

News Published

via BleepingComputer·06:06 PM

News Published

via BleepingComputer·06:07 PM

Frequently Asked Questions

What is the vulnerability severity of CVE-2024-20412?

The severity of CVE-2024-20412 is considered high due to the risk of unauthenticated local access to systems using static credentials.

How do I fix CVE-2024-20412?

To mitigate CVE-2024-20412, update your Cisco Firepower Threat Defense Software to the latest version where the vulnerability is patched.

Which Cisco Firepower versions are affected by CVE-2024-20412?

CVE-2024-20412 affects Cisco Firepower Threat Defense versions 7.1.0 through 7.4.1.1.

Who can exploit CVE-2024-20412?

CVE-2024-20412 can be exploited by unauthenticated local attackers who have physical access to the system.

What types of devices are impacted by CVE-2024-20412?

CVE-2024-20412 impacts devices in the Cisco Firepower 1000, 2100, 3100, and 4200 Series.

CVE-2024-20412: Critical severity Cisco Secure Firewall Threat Defense vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the vulnerability severity of CVE-2024-20412?

How do I fix CVE-2024-20412?

Which Cisco Firepower versions are affected by CVE-2024-20412?

Who can exploit CVE-2024-20412?

What types of devices are impacted by CVE-2024-20412?

Company

Resources

Contact