CVE-2024-20435: asyncos — Fix

Description

A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials.

Is your site exposed to CVE-2024-20435?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness Type (CWE)

CWE-250 CWE-250

Affected Products

Vendor	Product	Versions
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	asyncos	All
cisco	secure_web_appliance_virtual_s1000v	All
cisco	secure_web_appliance_virtual_s100v	All
cisco	secure_web_appliance_virtual_s300v	All
cisco	secure_web_appliance_virtual_s600v	All
cisco	secure_web_appliance_s196	All
cisco	secure_web_appliance_s396	All
cisco	secure_web_appliance_s696	All

References

Advisories & Patches

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-priv-esc-7uHpZsCC https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-swa-priv-esc-7uHpZsCC

Frequently Asked Questions

What is CVE-2024-20435? +

A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to execute arbitrary commands and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the CLI. An attacker could exploit this vulnerability by authenticating to the system and executing a crafted command on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root. To successfully exploit this vulnerability, an attacker would need at least guest credentials. It has a CVSS v3.1 base score of 8.8 (HIGH).

How severe is CVE-2024-20435? +

CVE-2024-20435 has a CVSS v3.1 score of 8.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2024-20435? +

CVE-2024-20435 affects products from cisco, specifically: asyncos, secure_web_appliance_s196, secure_web_appliance_s396, secure_web_appliance_s696, secure_web_appliance_virtual_s1000v, secure_web_appliance_virtual_s100v, secure_web_appliance_virtual_s300v, secure_web_appliance_virtual_s600v. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-20435? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-8370

Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power …

CVE-2026-40550

mpGabinet is vulnerable to Privilege Escalation due to excessive database privileges assigned to the user used by the application. An …

CVE-2024-43650

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS …

CVE-2024-43651

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue …

CVE-2024-43655

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue …

CVE-2025-22366

The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution …

CVE-2024-20435