Cisco FTD TLS Denial of Service Vulnerability (CVE-2024-20339) Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability - Vulnerability ID: cisco-sa-ftd-tls-dos-QXYE5Ufy - CVE Number: CVE-2024-20339 - CWE Number: CWE-476 - Severity: High - Release Date: October 23, 2024 - Version: 1.0 - Workarounds: No workarounds available - CVSS Score: Base 8.6 2. Vulnerability Impact: - Affected Devices: Cisco Firepower 2100 Series Firewalls - Affected Software Versions: Devices running vulnerable Cisco FTD software and configured with decryption policies. 3. Exploitation: - The vulnerability arises from an issue in TLS traffic handling. - An unauthenticated remote attacker can exploit this vulnerability by sending specific TLS traffic, causing a denial-of-service (DoS) condition on the affected device. 4. Remediation: - Cisco has released software updates to fix this vulnerability. - Customers can obtain the security patch through regular software update channels. 5. Affected Products: - Cisco Adaptive Security Appliance (ASA) Software - FTD Software on Firepower firewalls that are not part of the 2100 Series - Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software 6. Workarounds: - No workarounds available. 7. Related Links: - Detailed security advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-dos-QXYE5Ufy - Complete list of security advisories: Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication 8. Additional Information: - Revision history of the security advisory. - Source of the advisory: Discovered during the resolution of a Cisco TAC support case. - Advisory URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tls-dos-QXYE5Ufy This information helps users understand the vulnerability details, scope of impact, and how to remediate and prevent exploitation.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco FTD TLS Denial of Service Vulnerability (CVE-2024-20339) Advisory