cisco-sa-asaftd-persist-lce-vU3ekMJ3: Cisco Adaptive Security Appliance and Firepower Threat Defense Software Persistent Local Code Execution Vulnerability
A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are
Affected Software
Event History
Frequently Asked Questions
What is the severity of Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3?
The severity of Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3 is considered critical due to the potential for root-level code execution.
How do I fix Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3?
To fix Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3, it is recommended to apply the latest software updates released by Cisco.
Who is affected by the Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3?
The Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3 affects devices running specific versions of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software.
What actions can an attacker perform with Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3?
An authenticated local attacker can execute arbitrary code with root-level privileges due to the vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3.
When was the Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3 disclosed?
The Cisco vulnerability cisco-sa-asaftd-persist-lce-vU3ekMJ3 was disclosed on October 24, 2023.