CVE-2024-20268
HIGHDescription
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause an unexpected reload of the device. This vulnerability is due to insufficient input validation of SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device using IPv4 or IPv6. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects all versions of SNMP (versions 1, 2c, and 3) and requires a valid SNMP community string or valid SNMPv3 user credentials.
Is your site exposed to CVE-2024-20268?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
7.7
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weakness Type (CWE)
CWE-231
CWE-231
Affected Products
| Vendor | Product |
|---|---|
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | adaptive_security_appliance_software |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
| cisco | firepower_threat_defense |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-20268? +
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause an unexpected reload of the device.
This vulnerability is due to insufficient input validation of SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device using IPv4 or IPv6. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects all versions of SNMP (versions 1, 2c, and 3) and requires a valid SNMP community string or valid SNMPv3 user credentials. It has a CVSS v3.1 base score of 7.7 (HIGH).
How severe is CVE-2024-20268? +
CVE-2024-20268 has a CVSS v3.1 score of 7.7 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-20268? +
CVE-2024-20268 affects products from cisco, specifically: adaptive_security_appliance_software, firepower_threat_defense. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-20268? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2023-6841
7.5
A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker …
CVE-2024-31397
4.9
Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user …
CVE-2025-20188
10.0
A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles …
CVE-2025-20282
10.0
A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload …
CVE-2025-20309
10.0
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) …
CVE-2024-20419
10.0
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker …