Is CVE-2024-20341 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

What products does CVE-2024-20341 affect?

Tracked products affected include Cisco ASA. Check the version you run to see whether it is affected.

How do I fix CVE-2024-20341?

Apply the vendor fix in your normal patch cycle. Upgrade affected products to a fixed version.

CVE-2024-20341

Q: What is CVE-2024-20341?

CVE-2024-20341 is a medium-severity software vulnerability (CWE-80) with a CVSS score of 6.1. A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (

MEDIUM severity · CVSS 6.1 · CWE-80

6.1CVSS MEDIUM

Summary

A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a browser that is accessing an affected device. This vulnerability is due to improper validation of user-supplied input to application endpoints. An attacker could exploit this vulnerability by persuading a user to follow a link designed to submit malicious input to the affected application. A successful exploit could allow the attacker to execute arbitrary HTML or script code in the browser in the context of the web services page.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionRequired

Confidentiality impactLow

Integrity impactLow

Availability impactNone

Exploit probability (EPSS)0%

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products we track (1)

Cisco ASA

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

CVE-2024-20341

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information