Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-20331


A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to prevent users from authenticating. This vulnerability is due to insufficient entropy in the authentication process. An attacker could exploit this vulnerability by determining the handle of an authenticating user and using it to terminate their authentication session. A successful exploit could allow the attacker to force a user to restart the authentication process, preventing a legitimate user from establishing remote access VPN sessions.


Published

2024-10-23T17:15:17.870

Last Modified

2024-11-01T17:32:56.807

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.8 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-330
  • Type: Primary
    CWE-331

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco adaptive_security_appliance_software 9.8.1 Yes
Operating System cisco adaptive_security_appliance_software 9.8.1.5 Yes
Operating System cisco adaptive_security_appliance_software 9.8.1.7 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.8 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.14 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.15 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.17 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.20 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.24 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.26 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.28 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.33 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.35 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.38 Yes
Operating System cisco adaptive_security_appliance_software 9.8.2.45 Yes
Operating System cisco adaptive_security_appliance_software 9.8.3 Yes
Operating System cisco adaptive_security_appliance_software 9.8.3.8 Yes
Operating System cisco adaptive_security_appliance_software 9.8.3.11 Yes
Operating System cisco adaptive_security_appliance_software 9.8.3.14 Yes
Operating System cisco adaptive_security_appliance_software 9.8.3.16 Yes
Operating System cisco adaptive_security_appliance_software 9.8.3.18 Yes
Operating System cisco adaptive_security_appliance_software 9.8.3.21 Yes
Operating System cisco adaptive_security_appliance_software 9.8.3.26 Yes
Operating System cisco adaptive_security_appliance_software 9.8.3.29 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.3 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.7 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.8 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.10 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.12 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.15 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.17 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.20 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.22 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.25 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.26 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.29 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.32 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.33 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.34 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.35 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.39 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.40 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.41 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.43 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.44 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.45 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.46 Yes
Operating System cisco adaptive_security_appliance_software 9.8.4.48 Yes
Operating System cisco adaptive_security_appliance_software 9.12.1 Yes
Operating System cisco adaptive_security_appliance_software 9.12.1.2 Yes
Operating System cisco adaptive_security_appliance_software 9.12.1.3 Yes
Operating System cisco adaptive_security_appliance_software 9.12.2 Yes
Operating System cisco adaptive_security_appliance_software 9.12.2.1 Yes
Operating System cisco adaptive_security_appliance_software 9.12.2.4 Yes
Operating System cisco adaptive_security_appliance_software 9.12.2.5 Yes
Operating System cisco adaptive_security_appliance_software 9.12.2.9 Yes
Operating System cisco adaptive_security_appliance_software 9.12.3 Yes
Operating System cisco adaptive_security_appliance_software 9.12.3.2 Yes
Operating System cisco adaptive_security_appliance_software 9.12.3.7 Yes
Operating System cisco adaptive_security_appliance_software 9.12.3.9 Yes
Operating System cisco adaptive_security_appliance_software 9.12.3.12 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.2 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.4 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.7 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.8 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.10 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.13 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.18 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.24 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.26 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.29 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.30 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.35 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.37 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.38 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.39 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.40 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.41 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.47 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.48 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.50 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.52 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.54 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.55 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.56 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.58 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.62 Yes
Operating System cisco adaptive_security_appliance_software 9.12.4.65 Yes
Operating System cisco adaptive_security_appliance_software 9.14.1 Yes
Operating System cisco adaptive_security_appliance_software 9.14.1.6 Yes
Operating System cisco adaptive_security_appliance_software 9.14.1.10 Yes
Operating System cisco adaptive_security_appliance_software 9.14.1.15 Yes
Operating System cisco adaptive_security_appliance_software 9.14.1.19 Yes
Operating System cisco adaptive_security_appliance_software 9.14.1.30 Yes
Operating System cisco adaptive_security_appliance_software 9.14.2 Yes
Operating System cisco adaptive_security_appliance_software 9.14.2.4 Yes
Operating System cisco adaptive_security_appliance_software 9.14.2.8 Yes
Operating System cisco adaptive_security_appliance_software 9.14.2.13 Yes
Operating System cisco adaptive_security_appliance_software 9.14.2.15 Yes
Operating System cisco adaptive_security_appliance_software 9.14.3 Yes
Operating System cisco adaptive_security_appliance_software 9.14.3.1 Yes
Operating System cisco adaptive_security_appliance_software 9.14.3.9 Yes
Operating System cisco adaptive_security_appliance_software 9.14.3.11 Yes
Operating System cisco adaptive_security_appliance_software 9.14.3.13 Yes
Operating System cisco adaptive_security_appliance_software 9.14.3.15 Yes
Operating System cisco adaptive_security_appliance_software 9.14.3.18 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.6 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.7 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.12 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.13 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.14 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.15 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.17 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.22 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.23 Yes
Operating System cisco adaptive_security_appliance_software 9.14.4.24 Yes
Operating System cisco adaptive_security_appliance_software 9.15.1 Yes
Operating System cisco adaptive_security_appliance_software 9.15.1.1 Yes
Operating System cisco adaptive_security_appliance_software 9.15.1.7 Yes
Operating System cisco adaptive_security_appliance_software 9.15.1.10 Yes
Operating System cisco adaptive_security_appliance_software 9.15.1.15 Yes
Operating System cisco adaptive_security_appliance_software 9.15.1.16 Yes
Operating System cisco adaptive_security_appliance_software 9.15.1.17 Yes
Operating System cisco adaptive_security_appliance_software 9.15.1.21 Yes
Operating System cisco adaptive_security_appliance_software 9.16.1 Yes
Operating System cisco adaptive_security_appliance_software 9.16.1.28 Yes
Operating System cisco adaptive_security_appliance_software 9.16.2 Yes
Operating System cisco adaptive_security_appliance_software 9.16.2.3 Yes
Operating System cisco adaptive_security_appliance_software 9.16.2.7 Yes
Operating System cisco adaptive_security_appliance_software 9.16.2.11 Yes
Operating System cisco adaptive_security_appliance_software 9.16.2.13 Yes
Operating System cisco adaptive_security_appliance_software 9.16.2.14 Yes
Operating System cisco adaptive_security_appliance_software 9.16.3 Yes
Operating System cisco adaptive_security_appliance_software 9.16.3.3 Yes
Operating System cisco adaptive_security_appliance_software 9.16.3.14 Yes
Operating System cisco adaptive_security_appliance_software 9.16.3.15 Yes
Operating System cisco adaptive_security_appliance_software 9.16.3.19 Yes
Operating System cisco adaptive_security_appliance_software 9.16.3.23 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4.9 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4.14 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4.18 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4.19 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4.27 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4.38 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4.39 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4.42 Yes
Operating System cisco adaptive_security_appliance_software 9.16.4.48 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1.7 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1.9 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1.10 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1.11 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1.13 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1.15 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1.20 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1.30 Yes
Operating System cisco adaptive_security_appliance_software 9.17.1.33 Yes
Operating System cisco adaptive_security_appliance_software 9.18.1 Yes
Operating System cisco adaptive_security_appliance_software 9.18.1.3 Yes
Operating System cisco adaptive_security_appliance_software 9.18.2 Yes
Operating System cisco adaptive_security_appliance_software 9.18.2.5 Yes
Operating System cisco adaptive_security_appliance_software 9.18.2.7 Yes
Operating System cisco adaptive_security_appliance_software 9.18.2.8 Yes
Operating System cisco adaptive_security_appliance_software 9.18.3 Yes
Operating System cisco adaptive_security_appliance_software 9.18.3.39 Yes
Operating System cisco adaptive_security_appliance_software 9.18.3.46 Yes
Operating System cisco adaptive_security_appliance_software 9.18.3.53 Yes
Operating System cisco adaptive_security_appliance_software 9.18.3.55 Yes
Operating System cisco adaptive_security_appliance_software 9.18.3.56 Yes
Operating System cisco adaptive_security_appliance_software 9.18.4 Yes
Operating System cisco adaptive_security_appliance_software 9.18.4.5 Yes
Operating System cisco adaptive_security_appliance_software 9.18.4.8 Yes
Operating System cisco adaptive_security_appliance_software 9.19.1 Yes
Operating System cisco adaptive_security_appliance_software 9.19.1.5 Yes
Operating System cisco adaptive_security_appliance_software 9.19.1.9 Yes
Operating System cisco adaptive_security_appliance_software 9.19.1.12 Yes
Operating System cisco adaptive_security_appliance_software 9.19.1.18 Yes
Operating System cisco adaptive_security_appliance_software 9.19.1.22 Yes
Operating System cisco adaptive_security_appliance_software 9.19.1.24 Yes
Operating System cisco adaptive_security_appliance_software 9.19.1.27 Yes
Operating System cisco adaptive_security_appliance_software 9.20.1 Yes
Operating System cisco adaptive_security_appliance_software 9.20.1.5 Yes
Operating System cisco adaptive_security_appliance_software 9.20.2 Yes
Application cisco firepower_threat_defense_software 6.2.3 Yes
Application cisco firepower_threat_defense_software 6.2.3.1 Yes
Application cisco firepower_threat_defense_software 6.2.3.2 Yes
Application cisco firepower_threat_defense_software 6.2.3.3 Yes
Application cisco firepower_threat_defense_software 6.2.3.4 Yes
Application cisco firepower_threat_defense_software 6.2.3.5 Yes
Application cisco firepower_threat_defense_software 6.2.3.6 Yes
Application cisco firepower_threat_defense_software 6.2.3.7 Yes
Application cisco firepower_threat_defense_software 6.2.3.8 Yes
Application cisco firepower_threat_defense_software 6.2.3.9 Yes
Application cisco firepower_threat_defense_software 6.2.3.10 Yes
Application cisco firepower_threat_defense_software 6.2.3.11 Yes
Application cisco firepower_threat_defense_software 6.2.3.12 Yes
Application cisco firepower_threat_defense_software 6.2.3.13 Yes
Application cisco firepower_threat_defense_software 6.2.3.14 Yes
Application cisco firepower_threat_defense_software 6.2.3.15 Yes
Application cisco firepower_threat_defense_software 6.2.3.16 Yes
Application cisco firepower_threat_defense_software 6.2.3.17 Yes
Application cisco firepower_threat_defense_software 6.2.3.18 Yes
Application cisco firepower_threat_defense_software 6.4.0 Yes
Application cisco firepower_threat_defense_software 6.4.0.1 Yes
Application cisco firepower_threat_defense_software 6.4.0.2 Yes
Application cisco firepower_threat_defense_software 6.4.0.3 Yes
Application cisco firepower_threat_defense_software 6.4.0.4 Yes
Application cisco firepower_threat_defense_software 6.4.0.5 Yes
Application cisco firepower_threat_defense_software 6.4.0.6 Yes
Application cisco firepower_threat_defense_software 6.4.0.7 Yes
Application cisco firepower_threat_defense_software 6.4.0.8 Yes
Application cisco firepower_threat_defense_software 6.4.0.9 Yes
Application cisco firepower_threat_defense_software 6.4.0.10 Yes
Application cisco firepower_threat_defense_software 6.4.0.11 Yes
Application cisco firepower_threat_defense_software 6.4.0.12 Yes
Application cisco firepower_threat_defense_software 6.4.0.13 Yes
Application cisco firepower_threat_defense_software 6.4.0.14 Yes
Application cisco firepower_threat_defense_software 6.4.0.15 Yes
Application cisco firepower_threat_defense_software 6.4.0.16 Yes
Application cisco firepower_threat_defense_software 6.4.0.17 Yes
Application cisco firepower_threat_defense_software 6.6.0 Yes
Application cisco firepower_threat_defense_software 6.6.0.1 Yes
Application cisco firepower_threat_defense_software 6.6.1 Yes
Application cisco firepower_threat_defense_software 6.6.3 Yes
Application cisco firepower_threat_defense_software 6.6.4 Yes
Application cisco firepower_threat_defense_software 6.6.5 Yes
Application cisco firepower_threat_defense_software 6.6.5.1 Yes
Application cisco firepower_threat_defense_software 6.6.5.2 Yes
Application cisco firepower_threat_defense_software 6.6.7 Yes
Application cisco firepower_threat_defense_software 6.6.7.1 Yes
Application cisco firepower_threat_defense_software 6.6.7.2 Yes
Application cisco firepower_threat_defense_software 6.7.0 Yes
Application cisco firepower_threat_defense_software 6.7.0.1 Yes
Application cisco firepower_threat_defense_software 6.7.0.2 Yes
Application cisco firepower_threat_defense_software 6.7.0.3 Yes
Application cisco firepower_threat_defense_software 7.0.0 Yes
Application cisco firepower_threat_defense_software 7.0.0.1 Yes
Application cisco firepower_threat_defense_software 7.0.1 Yes
Application cisco firepower_threat_defense_software 7.0.1.1 Yes
Application cisco firepower_threat_defense_software 7.0.2 Yes
Application cisco firepower_threat_defense_software 7.0.2.1 Yes
Application cisco firepower_threat_defense_software 7.0.3 Yes
Application cisco firepower_threat_defense_software 7.0.4 Yes
Application cisco firepower_threat_defense_software 7.0.5 Yes
Application cisco firepower_threat_defense_software 7.0.6 Yes
Application cisco firepower_threat_defense_software 7.0.6.1 Yes
Application cisco firepower_threat_defense_software 7.1.0 Yes
Application cisco firepower_threat_defense_software 7.1.0.1 Yes
Application cisco firepower_threat_defense_software 7.1.0.2 Yes
Application cisco firepower_threat_defense_software 7.1.0.3 Yes
Application cisco firepower_threat_defense_software 7.2.0 Yes
Application cisco firepower_threat_defense_software 7.2.0.1 Yes
Application cisco firepower_threat_defense_software 7.2.1 Yes
Application cisco firepower_threat_defense_software 7.2.2 Yes
Application cisco firepower_threat_defense_software 7.2.3 Yes
Application cisco firepower_threat_defense_software 7.2.4 Yes
Application cisco firepower_threat_defense_software 7.2.4.1 Yes
Application cisco firepower_threat_defense_software 7.2.5 Yes
Application cisco firepower_threat_defense_software 7.2.5.1 Yes
Application cisco firepower_threat_defense_software 7.2.5.2 Yes
Application cisco firepower_threat_defense_software 7.3.0 Yes
Application cisco firepower_threat_defense_software 7.3.1 Yes
Application cisco firepower_threat_defense_software 7.3.1.1 Yes
Application cisco firepower_threat_defense_software 7.3.1.2 Yes
Application cisco firepower_threat_defense_software 7.4.0 Yes
Application cisco firepower_threat_defense_software 7.4.1 Yes
Application cisco firepower_threat_defense_software 7.4.1.1 Yes

References