VulnSocial

CVE-2024-20359Active Exploitation(cisco / adaptive_security_appliance_software)

LOWCVSS 6.0 · MEDIUMCISA KEV

Exploitation observed; activity peaked at 4 mentions and remains active

Immediate actions

  • Prioritize remediation for cisco adaptive_security_appliance_software systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability. This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

cisco CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-05-01. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • adaptive_security_appliance_software
  • secure_firewall_threat_defense

Threat summary

  • Active exploitation appears in 4 classified signals
  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 4 signals
  • General: 1 classified signal
  • Peaked 1d ago at 4 mentions (2026-05-03); latest day: 1
  • 5 total mentions across 2 days

Affected systems

Vendors
cisco
Products
adaptive_security_appliance_softwaresecure_firewall_threat_defense

267 versions affected across 2 products

Deep dive

Activity timeline5 mentions / 2d
01234Mentions · 2026-05-03: 4Mentions · 2026-07-15: 1Active Exploitation · 2026-05-03: 3Active Exploitation · 2026-07-15: 105-0307-15
Signal classification2 categories
Active Exploitation
480.0%
General
120.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-034
Active Exploitation3General1
2026-07-151
Active Exploitation1
Full discourse5 posts
  • CVETrends@CVEShield
    General

    Top 5 Trending CVEs: 1 - CVE-2026-31431 2 - CVE-2026-41940 3 - CVE-2026-3910 4 - CVE-2024-20359 5 - CVE-2024-20353 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard

    Post summary

    A simple list of trending CVE identifiers with no further technical or operational details.

    01031255
    1.7K followersView on X
  • ro0TCr4k@ro0TCr4k
    Active Exploitation

    Cisco ASA zero-days aren't new, but CVE-2024-20359 is different. Attackers are actively leveraging it for persistent implants that survive reboots and patches. The lesson: reactive patching isn't enough. You must hunt for root-cause compromises.

    Post summary

    CVE‑2024‑20359 is being actively exploited to install persistent implants that survive reboots and patches, emphasizing that reactive patching alone is insufficient and that organizations must hunt for root‑cause compromises.

    01120181
    481 followersView on X
  • Lyrie.ai@lyrie_ai
    Active Exploitation

    Vendor. CVE-2024-20359 added to CISA KEV: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Post summary

    CVE-2024-20359 has been added to the CISA Known Exploited Vulnerabilities list for Cisco ASA and Firepower Threat Defense, indicating it is actively being exploited.

    1001091
    152 followersView on X
  • Lyrie.ai@lyrie_ai
    Active Exploitation

    CVE-2024-20359. CVE-2024-20359 added to CISA KEV: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Post summary

    CVE-2024-20359 has been added to the CISA KEV list, highlighting that it is considered a threat that may be actively exploited against Cisco ASA and Firepower Threat Defense devices.

    10010103
    152 followersView on X
  • Lyrie.ai@lyrie_ai
    Active Exploitation

    https://research.lyrie.ai/research/active-exploit-cve-2024-20359-adaptive-security-appliance-asa-and-firepower-thre #lyrie #cybersecurity #CVE #threatintel #zerodayattack

    Post summary

    The tweet links to a research page announcing an active exploitation of CVE‑2024‑20359, implying that the vulnerability is being used in real‑world attacks.

    0001033
    152 followersView on X
CPE platform detail267 entries

267 of 267 entries

PartVendorProductVersionTarget SWTarget HW
OSciscoadaptive_security_appliance_software9.12.1--
OSciscoadaptive_security_appliance_software9.12.1.2--
OSciscoadaptive_security_appliance_software9.12.1.3--
OSciscoadaptive_security_appliance_software9.12.2--
OSciscoadaptive_security_appliance_software9.12.2.1--
OSciscoadaptive_security_appliance_software9.12.2.4--
OSciscoadaptive_security_appliance_software9.12.2.5--
OSciscoadaptive_security_appliance_software9.12.2.9--
OSciscoadaptive_security_appliance_software9.12.3--
OSciscoadaptive_security_appliance_software9.12.3.12--
OSciscoadaptive_security_appliance_software9.12.3.2--
OSciscoadaptive_security_appliance_software9.12.3.7--
OSciscoadaptive_security_appliance_software9.12.3.9--
OSciscoadaptive_security_appliance_software9.12.4--
OSciscoadaptive_security_appliance_software9.12.4.10--
OSciscoadaptive_security_appliance_software9.12.4.13--
OSciscoadaptive_security_appliance_software9.12.4.18--
OSciscoadaptive_security_appliance_software9.12.4.2--
OSciscoadaptive_security_appliance_software9.12.4.24--
OSciscoadaptive_security_appliance_software9.12.4.26--
OSciscoadaptive_security_appliance_software9.12.4.29--
OSciscoadaptive_security_appliance_software9.12.4.30--
OSciscoadaptive_security_appliance_software9.12.4.35--
OSciscoadaptive_security_appliance_software9.12.4.37--
OSciscoadaptive_security_appliance_software9.12.4.38--
OSciscoadaptive_security_appliance_software9.12.4.39--
OSciscoadaptive_security_appliance_software9.12.4.4--
OSciscoadaptive_security_appliance_software9.12.4.40--
OSciscoadaptive_security_appliance_software9.12.4.41--
OSciscoadaptive_security_appliance_software9.12.4.47--
OSciscoadaptive_security_appliance_software9.12.4.48--
OSciscoadaptive_security_appliance_software9.12.4.50--
OSciscoadaptive_security_appliance_software9.12.4.52--
OSciscoadaptive_security_appliance_software9.12.4.54--
OSciscoadaptive_security_appliance_software9.12.4.55--
OSciscoadaptive_security_appliance_software9.12.4.56--
OSciscoadaptive_security_appliance_software9.12.4.58--
OSciscoadaptive_security_appliance_software9.12.4.62--
OSciscoadaptive_security_appliance_software9.12.4.65--
OSciscoadaptive_security_appliance_software9.12.4.7--
OSciscoadaptive_security_appliance_software9.12.4.8--
OSciscoadaptive_security_appliance_software9.14.1--
OSciscoadaptive_security_appliance_software9.14.1.10--
OSciscoadaptive_security_appliance_software9.14.1.15--
OSciscoadaptive_security_appliance_software9.14.1.19--
OSciscoadaptive_security_appliance_software9.14.1.30--
OSciscoadaptive_security_appliance_software9.14.1.6--
OSciscoadaptive_security_appliance_software9.14.2--
OSciscoadaptive_security_appliance_software9.14.2.13--
OSciscoadaptive_security_appliance_software9.14.2.15--
OSciscoadaptive_security_appliance_software9.14.2.4--
OSciscoadaptive_security_appliance_software9.14.2.8--
OSciscoadaptive_security_appliance_software9.14.3--
OSciscoadaptive_security_appliance_software9.14.3.1--
OSciscoadaptive_security_appliance_software9.14.3.11--
OSciscoadaptive_security_appliance_software9.14.3.13--
OSciscoadaptive_security_appliance_software9.14.3.15--
OSciscoadaptive_security_appliance_software9.14.3.18--
OSciscoadaptive_security_appliance_software9.14.3.9--
OSciscoadaptive_security_appliance_software9.14.4--
OSciscoadaptive_security_appliance_software9.14.4.12--
OSciscoadaptive_security_appliance_software9.14.4.13--
OSciscoadaptive_security_appliance_software9.14.4.14--
OSciscoadaptive_security_appliance_software9.14.4.15--
OSciscoadaptive_security_appliance_software9.14.4.17--
OSciscoadaptive_security_appliance_software9.14.4.22--
OSciscoadaptive_security_appliance_software9.14.4.23--
OSciscoadaptive_security_appliance_software9.14.4.6--
OSciscoadaptive_security_appliance_software9.14.4.7--
OSciscoadaptive_security_appliance_software9.15.1--
OSciscoadaptive_security_appliance_software9.15.1.1--
OSciscoadaptive_security_appliance_software9.15.1.10--
OSciscoadaptive_security_appliance_software9.15.1.15--
OSciscoadaptive_security_appliance_software9.15.1.16--
OSciscoadaptive_security_appliance_software9.15.1.17--
OSciscoadaptive_security_appliance_software9.15.1.21--
OSciscoadaptive_security_appliance_software9.15.1.7--
OSciscoadaptive_security_appliance_software9.16.1--
OSciscoadaptive_security_appliance_software9.16.1.28--
OSciscoadaptive_security_appliance_software9.16.2--
OSciscoadaptive_security_appliance_software9.16.2.11--
OSciscoadaptive_security_appliance_software9.16.2.13--
OSciscoadaptive_security_appliance_software9.16.2.14--
OSciscoadaptive_security_appliance_software9.16.2.3--
OSciscoadaptive_security_appliance_software9.16.2.7--
OSciscoadaptive_security_appliance_software9.16.3--
OSciscoadaptive_security_appliance_software9.16.3.14--
OSciscoadaptive_security_appliance_software9.16.3.15--
OSciscoadaptive_security_appliance_software9.16.3.19--
OSciscoadaptive_security_appliance_software9.16.3.23--
OSciscoadaptive_security_appliance_software9.16.3.3--
OSciscoadaptive_security_appliance_software9.16.4--
OSciscoadaptive_security_appliance_software9.16.4.14--
OSciscoadaptive_security_appliance_software9.16.4.18--
OSciscoadaptive_security_appliance_software9.16.4.19--
OSciscoadaptive_security_appliance_software9.16.4.27--
OSciscoadaptive_security_appliance_software9.16.4.38--
OSciscoadaptive_security_appliance_software9.16.4.39--
OSciscoadaptive_security_appliance_software9.16.4.42--
OSciscoadaptive_security_appliance_software9.16.4.48--
OSciscoadaptive_security_appliance_software9.16.4.55--
OSciscoadaptive_security_appliance_software9.16.4.9--
OSciscoadaptive_security_appliance_software9.17.1--
OSciscoadaptive_security_appliance_software9.17.1.10--
OSciscoadaptive_security_appliance_software9.17.1.11--
OSciscoadaptive_security_appliance_software9.17.1.13--
OSciscoadaptive_security_appliance_software9.17.1.15--
OSciscoadaptive_security_appliance_software9.17.1.20--
OSciscoadaptive_security_appliance_software9.17.1.30--
OSciscoadaptive_security_appliance_software9.17.1.33--
OSciscoadaptive_security_appliance_software9.17.1.7--
OSciscoadaptive_security_appliance_software9.17.1.9--
OSciscoadaptive_security_appliance_software9.18.1--
OSciscoadaptive_security_appliance_software9.18.1.3--
OSciscoadaptive_security_appliance_software9.18.2--
OSciscoadaptive_security_appliance_software9.18.2.5--
OSciscoadaptive_security_appliance_software9.18.2.7--
OSciscoadaptive_security_appliance_software9.18.2.8--
OSciscoadaptive_security_appliance_software9.18.3--
OSciscoadaptive_security_appliance_software9.18.3.39--
OSciscoadaptive_security_appliance_software9.18.3.46--
OSciscoadaptive_security_appliance_software9.18.3.53--
OSciscoadaptive_security_appliance_software9.18.3.55--
OSciscoadaptive_security_appliance_software9.18.3.56--
OSciscoadaptive_security_appliance_software9.18.4--
OSciscoadaptive_security_appliance_software9.18.4.5--
OSciscoadaptive_security_appliance_software9.18.4.8--
OSciscoadaptive_security_appliance_software9.19.1--
OSciscoadaptive_security_appliance_software9.19.1.12--
OSciscoadaptive_security_appliance_software9.19.1.18--
OSciscoadaptive_security_appliance_software9.19.1.22--
OSciscoadaptive_security_appliance_software9.19.1.24--
OSciscoadaptive_security_appliance_software9.19.1.27--
OSciscoadaptive_security_appliance_software9.19.1.5--
OSciscoadaptive_security_appliance_software9.19.1.9--
OSciscoadaptive_security_appliance_software9.20.1--
OSciscoadaptive_security_appliance_software9.20.1.5--
OSciscoadaptive_security_appliance_software9.20.2--
OSciscoadaptive_security_appliance_software9.8.1--
OSciscoadaptive_security_appliance_software9.8.1.5--
OSciscoadaptive_security_appliance_software9.8.1.7--
OSciscoadaptive_security_appliance_software9.8.2--
OSciscoadaptive_security_appliance_software9.8.2.14--
OSciscoadaptive_security_appliance_software9.8.2.15--
OSciscoadaptive_security_appliance_software9.8.2.17--
OSciscoadaptive_security_appliance_software9.8.2.20--
OSciscoadaptive_security_appliance_software9.8.2.24--
OSciscoadaptive_security_appliance_software9.8.2.26--
OSciscoadaptive_security_appliance_software9.8.2.28--
OSciscoadaptive_security_appliance_software9.8.2.33--
OSciscoadaptive_security_appliance_software9.8.2.35--
OSciscoadaptive_security_appliance_software9.8.2.38--
OSciscoadaptive_security_appliance_software9.8.2.8--
OSciscoadaptive_security_appliance_software9.8.3--
OSciscoadaptive_security_appliance_software9.8.3.11--
OSciscoadaptive_security_appliance_software9.8.3.14--
OSciscoadaptive_security_appliance_software9.8.3.16--
OSciscoadaptive_security_appliance_software9.8.3.18--
OSciscoadaptive_security_appliance_software9.8.3.21--
OSciscoadaptive_security_appliance_software9.8.3.26--
OSciscoadaptive_security_appliance_software9.8.3.29--
OSciscoadaptive_security_appliance_software9.8.3.8--
OSciscoadaptive_security_appliance_software9.8.4--
OSciscoadaptive_security_appliance_software9.8.4.10--
OSciscoadaptive_security_appliance_software9.8.4.12--
OSciscoadaptive_security_appliance_software9.8.4.15--
OSciscoadaptive_security_appliance_software9.8.4.17--
OSciscoadaptive_security_appliance_software9.8.4.20--
OSciscoadaptive_security_appliance_software9.8.4.22--
OSciscoadaptive_security_appliance_software9.8.4.25--
OSciscoadaptive_security_appliance_software9.8.4.26--
OSciscoadaptive_security_appliance_software9.8.4.29--
OSciscoadaptive_security_appliance_software9.8.4.3--
OSciscoadaptive_security_appliance_software9.8.4.32--
OSciscoadaptive_security_appliance_software9.8.4.33--
OSciscoadaptive_security_appliance_software9.8.4.34--
OSciscoadaptive_security_appliance_software9.8.4.35--
OSciscoadaptive_security_appliance_software9.8.4.39--
OSciscoadaptive_security_appliance_software9.8.4.40--
OSciscoadaptive_security_appliance_software9.8.4.41--
OSciscoadaptive_security_appliance_software9.8.4.43--
OSciscoadaptive_security_appliance_software9.8.4.44--
OSciscoadaptive_security_appliance_software9.8.4.45--
OSciscoadaptive_security_appliance_software9.8.4.46--
OSciscoadaptive_security_appliance_software9.8.4.48--
OSciscoadaptive_security_appliance_software9.8.4.7--
OSciscoadaptive_security_appliance_software9.8.4.8--
Appciscosecure_firewall_threat_defense6.2.3--
Appciscosecure_firewall_threat_defense6.2.3.1--
Appciscosecure_firewall_threat_defense6.2.3.10--
Appciscosecure_firewall_threat_defense6.2.3.11--
Appciscosecure_firewall_threat_defense6.2.3.12--
Appciscosecure_firewall_threat_defense6.2.3.13--
Appciscosecure_firewall_threat_defense6.2.3.14--
Appciscosecure_firewall_threat_defense6.2.3.15--
Appciscosecure_firewall_threat_defense6.2.3.16--
Appciscosecure_firewall_threat_defense6.2.3.17--
Appciscosecure_firewall_threat_defense6.2.3.18--
Appciscosecure_firewall_threat_defense6.2.3.2--
Appciscosecure_firewall_threat_defense6.2.3.3--
Appciscosecure_firewall_threat_defense6.2.3.4--
Appciscosecure_firewall_threat_defense6.2.3.5--
Appciscosecure_firewall_threat_defense6.2.3.6--
Appciscosecure_firewall_threat_defense6.2.3.7--
Appciscosecure_firewall_threat_defense6.2.3.8--
Appciscosecure_firewall_threat_defense6.2.3.9--
Appciscosecure_firewall_threat_defense6.4.0--
Appciscosecure_firewall_threat_defense6.4.0.1--
Appciscosecure_firewall_threat_defense6.4.0.10--
Appciscosecure_firewall_threat_defense6.4.0.11--
Appciscosecure_firewall_threat_defense6.4.0.12--
Appciscosecure_firewall_threat_defense6.4.0.13--
Appciscosecure_firewall_threat_defense6.4.0.14--
Appciscosecure_firewall_threat_defense6.4.0.15--
Appciscosecure_firewall_threat_defense6.4.0.16--
Appciscosecure_firewall_threat_defense6.4.0.17--
Appciscosecure_firewall_threat_defense6.4.0.2--
Appciscosecure_firewall_threat_defense6.4.0.3--
Appciscosecure_firewall_threat_defense6.4.0.4--
Appciscosecure_firewall_threat_defense6.4.0.5--
Appciscosecure_firewall_threat_defense6.4.0.6--
Appciscosecure_firewall_threat_defense6.4.0.7--
Appciscosecure_firewall_threat_defense6.4.0.8--
Appciscosecure_firewall_threat_defense6.4.0.9--
Appciscosecure_firewall_threat_defense6.6.0--
Appciscosecure_firewall_threat_defense6.6.0.1--
Appciscosecure_firewall_threat_defense6.6.1--
Appciscosecure_firewall_threat_defense6.6.3--
Appciscosecure_firewall_threat_defense6.6.4--
Appciscosecure_firewall_threat_defense6.6.5--
Appciscosecure_firewall_threat_defense6.6.5.1--
Appciscosecure_firewall_threat_defense6.6.5.2--
Appciscosecure_firewall_threat_defense6.6.7--
Appciscosecure_firewall_threat_defense6.6.7.1--
Appciscosecure_firewall_threat_defense6.7.0--
Appciscosecure_firewall_threat_defense6.7.0.1--
Appciscosecure_firewall_threat_defense6.7.0.2--
Appciscosecure_firewall_threat_defense6.7.0.3--
Appciscosecure_firewall_threat_defense7.0.0--
Appciscosecure_firewall_threat_defense7.0.0.1--
Appciscosecure_firewall_threat_defense7.0.1--
Appciscosecure_firewall_threat_defense7.0.1.1--
Appciscosecure_firewall_threat_defense7.0.2--
Appciscosecure_firewall_threat_defense7.0.2.1--
Appciscosecure_firewall_threat_defense7.0.3--
Appciscosecure_firewall_threat_defense7.0.4--
Appciscosecure_firewall_threat_defense7.0.5--
Appciscosecure_firewall_threat_defense7.0.6--
Appciscosecure_firewall_threat_defense7.0.6.1--
Appciscosecure_firewall_threat_defense7.1.0--
Appciscosecure_firewall_threat_defense7.1.0.1--
Appciscosecure_firewall_threat_defense7.1.0.2--
Appciscosecure_firewall_threat_defense7.1.0.3--
Appciscosecure_firewall_threat_defense7.2.0--
Appciscosecure_firewall_threat_defense7.2.0.1--
Appciscosecure_firewall_threat_defense7.2.1--
Appciscosecure_firewall_threat_defense7.2.2--
Appciscosecure_firewall_threat_defense7.2.3--
Appciscosecure_firewall_threat_defense7.2.4--
Appciscosecure_firewall_threat_defense7.2.4.1--
Appciscosecure_firewall_threat_defense7.2.5--
Appciscosecure_firewall_threat_defense7.2.5.1--
Appciscosecure_firewall_threat_defense7.3.0--
Appciscosecure_firewall_threat_defense7.3.1--
Appciscosecure_firewall_threat_defense7.3.1.1--
Appciscosecure_firewall_threat_defense7.4.0--
Appciscosecure_firewall_threat_defense7.4.1--

Explore more

Back to dashboardcisco CVEsadaptive_security_appliance_software vulnerabilities