Cisco FTD/ASA Geolocation ACL Bypass Vulnerability (CVE-2024-20431) Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco Firepower Threat Defense Software Geolocation ACL Bypass Vulnerability - Vulnerability ID: cisco-sa-ftd-geoip-bypass-MB4zRDu - CVE Number: CVE-2024-20431 - CWE Number: CWE-229 - CVSS Score: Base 5.8 2. Vulnerability Impact: - Affected Product: Cisco Firepower Threat Defense (FTD) Software - Affected Version: Final - Workaround: No workaround available 3. Vulnerability Description: - Due to improper configuration of geolocation access control functionality, unauthorized remote attackers can bypass access control policies. 4. Exploitation: - Attackers can exploit this vulnerability by sending traffic through the affected device. - Successful exploitation allows attackers to bypass geolocation-based access control policies and successfully send traffic to protected devices. 5. Remediation: - Cisco has released software updates to address this vulnerability. - No workaround available. 6. Affected Products: - Cisco Adaptive Security Appliance (ASA) Software - Cisco Cyber Vision - Cisco Secure Firewall Management Center (FMC) Software - Cisco Unified Threat Defense (UTD) Software for Cisco IOS XE Software - Meraki products - Open Source Snort 2 - Open Source Snort 3 7. Workaround: - No workaround available. 8. Fixed Software: - When considering software upgrades, it is recommended to regularly review Cisco product security advisories to determine exposure and identify complete upgrade solutions. 9. Affected Products: - Cisco ASA, FMC, and FTD Software - Cisco Software Checker tool can help determine exposure and identify the earliest fixed version. 10. Public Announcements: - No public announcements or malicious exploitation of this vulnerability have been identified. 11. Source: - The vulnerability was discovered during the resolution of a Cisco TAC support case. 12. Revision History: - Version 1.0: Initial public release, Status: Final, Date: October 23, 2024. This information provides detailed descriptions of the vulnerability, its impact scope, remediation steps, and affected products.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco FTD/ASA Geolocation ACL Bypass Vulnerability (CVE-2024-20431) Advisory