https://pwn.watch/t/cisco-asa Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 12 Nov 2024 00:00:00 GMT https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120 https://pwn.watch/i/cisco-adaptive-security-appliance-asa-cve-2014-2120 Tue, 12 Nov 2024 00:00:00 GMT medium <p>Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. Added to the CISA KEV catalog on 2024-11-12. CVE-2014-2120 was assigned before 2024; the KEV listing came in 2024.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-11-12: CISA added CVE-2014-2120 to the KEV catalog (federal deadline 2024-12-03) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2014-2120</p> https://pwn.watch/i/cisco-adaptive-security-appliance-asa-and-firepowe-cve-2024-20481 https://pwn.watch/i/cisco-adaptive-security-appliance-asa-and-firepowe-cve-2024-20481 Thu, 24 Oct 2024 00:00:00 GMT medium <p>Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) of the RAVPN service. Added to the CISA KEV catalog on 2024-10-24.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-10-24: CISA added CVE-2024-20481 to the KEV catalog (federal deadline 2024-11-14) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li><li>2024-10-23: CVE-2024-20481 published (<a href="https://nvd.nist.gov/vuln/detail/CVE-2024-20481">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2024-20481</p> https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359 https://pwn.watch/i/cisco-asa-ftd-arcanedoor-cve-2024-20353-20359 Wed, 24 Apr 2024 00:00:00 GMT high <p>Cisco Talos disclosed ArcaneDoor, a state-sponsored campaign against perimeter devices that exploited two Cisco Adaptive Security Appliance and Firepower Threat Defense zero-days: a denial of service (CVE-2024-20353) and a persistent local code execution bug (CVE-2024-20359), used to plant the Line Dancer and Line Runner implants. Added to the CISA KEV catalog on 2024-04-24.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-04-24: CVE-2024-20353 published (<a href="https://nvd.nist.gov/vuln/detail/CVE-2024-20353">source</a>)</li><li>2024-04-24: CVE-2024-20359 published (<a href="https://nvd.nist.gov/vuln/detail/CVE-2024-20359">source</a>)</li><li>2024-04-24: CISA added CVE-2024-20353 to the KEV catalog (federal deadline 2024-05-01) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2024-20353, CVE-2024-20359</p> https://pwn.watch/i/cisco-adaptive-security-appliance-asa-and-firepowe-cve-2020-3259 https://pwn.watch/i/cisco-adaptive-security-appliance-asa-and-firepowe-cve-2020-3259 Thu, 15 Feb 2024 00:00:00 GMT high <p>Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations. Added to the CISA KEV catalog on 2024-02-15. CISA lists known use in ransomware campaigns. CVE-2020-3259 was assigned before 2024; the KEV listing came in 2024.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-02-15: CISA added CVE-2020-3259 to the KEV catalog (federal deadline 2024-03-07) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2020-3259</p>