CVE-2024-20260
published 2024-10-23CVE-2024-20260: Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure…
PriorityP349high8.6CVSS 3.1
AVNACLPRNUINSCCNINAH
EPSS
0.59%
48.1th percentile
Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability affects all Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software platforms.
A vulnerability in the VPN and management web servers of the Cisco Secure Firewall ASA Software and Cisco Secure FTD Software platforms could allow an unauthenticated, remote attacker to cause an affected device to run out of system memory or buffer blocks, which in turn could cause SSL VPN connection processing to slow down and eventually cease altogether.
This vulnerability is due to a lack of proper memory management for new incoming SSL/TLS connections. An attacker could exploit this vulnerability by sending a large number of new incoming SSL/TLS connections to the targeted device. A successful exploit could allow the attacker to deplete system memory or buffers, resulting in a denial of service (DoS) condition. The memory or buffers could be reclaimed slowly if the attack traffic is stopped, but a manual reload may be required to restore operations quickly.
Affected
170 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_virtual_appliance_and_secure_firewall_threat_defense_virtual_s | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
| cisco | cisco_secure_firewall_adaptive_security_appliance_software | — | — |
CVSS provenance
nvdv3.18.6HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
vendor_cisco8.6HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Cisco ASA/Secure Firewall Threat Defense SSL VPN memory allocation (cisco-sa-asaftdvirtual-dos-MuenGnYR)
vuldb·2026-09-17·CVSS 8.6
CVE-2024-20260 [HIGH] Cisco ASA/Secure Firewall Threat Defense SSL VPN memory allocation (cisco-sa-asaftdvirtual-dos-MuenGnYR)
A vulnerability has been found in Cisco ASA and Secure Firewall Threat Defense and classified as problematic. Impacted is an unknown function of the component SSL VPN. The manipulation leads to uncontrolled memory allocation.
This vulnerability is uniquely identified as CVE-2024-20260. The attack is possible to be carried out remotely. No exploit exists.
The affected component should be upgraded.
GHSA
GHSA-27g3-cp2g-22pw: A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense
ghsa_unreviewed·2024-10-23
CVE-2024-20260 [HIGH] CWE-789 GHSA-27g3-cp2g-22pw: A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense
A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv), formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual devices to run out of system memory, which could cause SSL VPN connection processing to slow down and eventually cease all together.
This vulnerability is due to a lack of proper memory management for new incoming SSL/TLS connections on the virtual platforms. An attacker could exploit this vulnerability by sending a large number of new incoming SSL/TLS connections to the targeted virtual platform. A successful exploit could allow the attacker to deplete system memory, resulting in a denial of servic
Cisco
Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability
vendor_cisco·2024-10-23·CVSS 8.6
CVE-2024-20260 [HIGH] CWE-789 Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability
Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability
A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv), formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual devices to run out of system memory, which could cause SSL VPN connection processing to slow down and eventually cease all together.
This vulnerability is due to a lack of proper memory management for new incoming SSL/TLS connections on the virtual platforms. An attacker could exploit this vulnerability by sending a large number of new incoming SSL/TLS connections to the targ
Cisco
Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability
vendor_cisco·CVSS 3.1
CVE-2024-20260 Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability
CVE-2024-20260: Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability
A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv), formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual devices to run out of system memory, which could cause SSL VPN connection processing to slow down and eventually cease all together. This vulnerability is due to a lack of proper memory management for new incoming SSL/TLS connections on the virtual platforms. An attacker could exploit this vulnerability by sending a large number of new incoming SSL/TLS connectio
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-23
Published