Description
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause an unexpected reload of the device.
This vulnerability is due to insufficient input validation of SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device using IPv4 or IPv6. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects all versions of SNMP (versions 1, 2c, and 3) and requires a valid SNMP community string or valid SNMPv3 user credentials.
Reserved 2023-11-08 | Published 2024-10-23 | Updated 2024-10-24 | Assigner
ciscoHIGH: 7.7CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Problem types
Improper Handling of Extra Values
Product status
Default status
unknown
9.14.1
affected
9.14.1.10
affected
9.14.1.6
affected
9.14.1.15
affected
9.14.1.19
affected
9.14.1.30
affected
9.15.1
affected
9.14.2
affected
9.14.2.4
affected
9.15.1.7
affected
9.14.2.8
affected
9.15.1.10
affected
9.14.2.13
affected
9.15.1.15
affected
9.14.2.15
affected
9.16.1
affected
9.15.1.16
affected
9.14.3
affected
9.16.1.28
affected
9.14.3.1
affected
9.14.3.9
affected
9.16.2
affected
9.16.2.3
affected
9.14.3.11
affected
9.15.1.17
affected
9.15.1.1
affected
9.14.3.13
affected
9.16.2.7
affected
9.14.3.15
affected
9.17.1
affected
9.16.2.11
affected
9.14.3.18
affected
9.16.2.13
affected
9.14.4
affected
9.16.2.14
affected
9.17.1.7
affected
9.15.1.21
affected
9.16.3.3
affected
9.14.4.6
affected
9.16.3
affected
9.16.3.14
affected
9.17.1.9
affected
9.14.4.7
affected
9.17.1.10
affected
9.18.1
affected
9.14.4.12
affected
9.16.3.15
affected
9.18.1.3
affected
9.17.1.11
affected
9.14.4.13
affected
9.18.2
affected
9.16.3.19
affected
9.17.1.13
affected
9.14.4.14
affected
9.17.1.15
affected
9.14.4.15
affected
9.16.3.23
affected
9.18.2.5
affected
9.16.4
affected
9.14.4.17
affected
9.17.1.20
affected
9.18.2.7
affected
9.19.1
affected
9.16.4.9
affected
9.18.2.8
affected
9.14.4.22
affected
9.16.4.14
affected
9.18.3
affected
9.19.1.5
affected
9.14.4.23
affected
9.16.4.18
affected
9.17.1.30
affected
9.19.1.9
affected
9.18.3.39
affected
9.16.4.19
affected
9.19.1.12
affected
9.18.3.46
affected
9.16.4.27
affected
9.19.1.18
affected
9.18.3.53
affected
9.18.3.55
affected
9.16.4.38
affected
9.17.1.33
affected
9.16.4.39
affected
9.18.3.56
affected
9.20.1
affected
9.16.4.42
affected
9.19.1.22
affected
9.18.4
affected
9.20.1.5
affected
9.18.4.5
affected
9.19.1.24
affected
9.16.4.48
affected
9.18.4.8
affected
9.20.2
affected
9.19.1.27
affected
9.14.4.24
affected
Default status
unknown
6.6.0
affected
6.6.0.1
affected
6.6.1
affected
6.7.0
affected
6.6.3
affected
6.7.0.1
affected
6.6.4
affected
6.7.0.2
affected
7.0.0
affected
7.0.0.1
affected
6.6.5
affected
7.0.1
affected
7.1.0
affected
6.6.5.1
affected
7.0.1.1
affected
6.7.0.3
affected
7.1.0.1
affected
6.6.5.2
affected
7.0.2
affected
7.2.0
affected
7.0.2.1
affected
7.0.3
affected
6.6.7
affected
7.1.0.2
affected
7.2.0.1
affected
7.0.4
affected
7.2.1
affected
7.0.5
affected
7.3.0
affected
7.2.2
affected
7.2.3
affected
6.6.7.1
affected
7.3.1
affected
7.1.0.3
affected
7.2.4
affected
7.0.6
affected
7.2.5
affected
7.2.4.1
affected
7.3.1.1
affected
7.4.0
affected
7.0.6.1
affected
7.2.5.1
affected
7.4.1
affected
7.4.1.1
affected
6.6.7.2
affected
7.2.5.2
affected
7.3.1.2
affected
References
sec.cloudapps.cisco.com/...cisco-sa-asaftd-snmp-dos-7TcnzxTU (cisco-sa-asaftd-snmp-dos-7TcnzxTU)
sec.cloudapps.cisco.com/...dvisory/cisco-sa-fmc-xss-M446vbEO
sec.cloudapps.cisco.com/...enter/viewErp.x?alertId=ERP-75300 (Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication)
cve.org (CVE-2024-20268)
nvd.nist.gov (CVE-2024-20268)
Download JSON
Subscribe to our newsletter to learn more about our work.
