Is CVE-2024-20268 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

What products does CVE-2024-20268 affect?

Tracked products affected include Cisco ASA. Check the version you run to see whether it is affected.

How do I fix CVE-2024-20268?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2024-20268

Q: What is CVE-2024-20268?

CVE-2024-20268 is a high-severity software vulnerability (CWE-231) with a CVSS score of 7.7. A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause an unexpec

HIGH severity · CVSS 7.7 · CWE-231

7.7CVSS HIGH

Summary

A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause an unexpected reload of the device. This vulnerability is due to insufficient input validation of SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device using IPv4 or IPv6. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects all versions of SNMP (versions 1, 2c, and 3) and requires a valid SNMP community string or valid SNMPv3 user credentials.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredLow

User interactionNone

Confidentiality impactNone

Integrity impactNone

Availability impactHigh

Exploit probability (EPSS)1%

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products we track (1)

Cisco ASA

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

CVE-2024-20268

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information