Cisco ASA/FTD zero-days used in the ArcaneDoor espionage campaign ยท updates https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359 Cisco Talos disclosed ArcaneDoor, a state-sponsored campaign against perimeter devices that exploited two Cisco Adaptive Security Appliance and Firepower Threat Defense zero-days: a denial of service (CVE-2024-20353) and a persistent local code execution bug (CVE-2024-20359), used to plant the Line Dancer and Line Runner implants. Added to the CISA KEV catalog on 2024-04-24. en Wed, 24 Apr 2024 00:00:00 GMT Cisco ASA/FTD zero-days used in the ArcaneDoor espionage campaign: CVE-2024-20353 published https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359 https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359#2024-04-24-d231e022 Wed, 24 Apr 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-20353">Source</a></p> Cisco ASA/FTD zero-days used in the ArcaneDoor espionage campaign: CVE-2024-20359 published https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359 https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359#2024-04-24-4064e390 Wed, 24 Apr 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-20359">Source</a></p> Cisco ASA/FTD zero-days used in the ArcaneDoor espionage campaign: CISA added CVE-2024-20353 to the KEV catalog (federal deadline 2024-05-01) https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359 https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359#2024-04-24-e93105f7 Wed, 24 Apr 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Cisco ASA/FTD zero-days used in the ArcaneDoor espionage campaign: CISA added CVE-2024-20359 to the KEV catalog (federal deadline 2024-05-01) https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359 https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359#2024-04-24-686c1e4d Wed, 24 Apr 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Cisco ASA/FTD zero-days used in the ArcaneDoor espionage campaign: Cisco Talos discloses the ArcaneDoor campaign; Cisco ships fixes https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359 https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359#2024-04-24-704b2485 Wed, 24 Apr 2024 00:00:00 GMT high <p><a href="https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/">Source</a></p>