cisco-sa-asaftd-persist-lce-vU3ekMJ3: Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability
First published: Wed Oct 23 2024(Updated: )
A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance Software | ||
| Cisco Firepower Threat Defense |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3?
The severity of Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3 is considered critical due to the potential for root-level code execution.
How do I fix Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3?
To fix Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3, it is recommended to apply the latest software updates released by Cisco.
Who is affected by the Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3?
The Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3 affects devices running specific versions of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software.
What actions can an attacker perform with Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3?
An authenticated local attacker can execute arbitrary code with root-level privileges due to the vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3.
When was the Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3 disclosed?
The Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3 was disclosed on October 24, 2023.
- collector/cisco-recent
- source/Cisco
- agent/severity
- agent/title
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/event
- agent/type
- agent/first-publish-date
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco adaptive security appliance software
- canonical/cisco firepower threat defense