high CISA KEV

CVE-2024-20359

Cisco ASA and FTD Privilege Escalation Vulnerability

// Description

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.

// Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Federal remediation due May 1, 2024 — past due

// Coverage

CVE-2024-20359: Cisco IMC Auth Bypass Grants Admin Access
Apr 2, 2026