CVE-2024-20353

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8.6EPSS 71%

Published 2024-04-24Updated 2026-04-08

Exploited in the wildMedia 19871Patch

Vulnerability details

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CNAcisco

EPSS score history

Sources

8 links

PoC links are not available for guest users. Login to view them.

CISA Known Exploited CVEShield InTheWild Bleeping Computer Bleeping Computer Bleeping Computer Bleeping Computer CVE Organization

Profile

CVSS

8.6

EPSS

71%

Published

2024-04-24

Updated

2026-04-08

CNA

cisco

Vendors

Cisco

2 products

CPEs

cpe:2.3:a:cisco:asa:9.8.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asa:9.12.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asa:9.14.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asa:9.15.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asa:9.16.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asa:9.17.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asa:9.18.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asa:9.19.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asa:9.20.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firepower_threat_defense_software:6.2.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firepower_threat_defense_software:6.6.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firepower_threat_defense_software:6.4.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firepower_threat_defense_software:6.7.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firepower_threat_defense_software:7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firepower_threat_defense_software:7.1.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firepower_threat_defense_software:7.2.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firepower_threat_defense_software:7.3.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firepower_threat_defense_software:7.4.0:*:*:*:*:*:*:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated