CVE-2024-20359: Cisco ASA and FTD Privilege Escalation Vulnerability

criticalknown exploitedCVE-2024-20359

Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.

CSIRTS triage

vendor: Cisco product: Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Privilege escalation

What: The vulnerability allows local privilege escalation from Administrator to root.
Who is affected: Deployments of Cisco ASA and FTD are affected.
Urgency: Remediation is urgent due to active exploitation and critical severity.
Action: Apply the latest security patches provided by Cisco.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

Get an email when a new Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) advisory drops — max one per day, one-click unsubscribe.

Details

Source: CISA Known Exploited Vulnerabilities (US · database · site)
Severity: critical
Published: 2024-04-24
Exploitation: Observed in the wild (CISA KEV)

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-20359

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Exploitation confirmedCVE-2024-20359Already exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 97% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2024-20359	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

unknownexploitedMultiple vulnerabilities in Cisco products (April 25, 2024)cert-fr-alerte

Recent advisories for Cisco ASA and

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

criticalexploitedCVE-2025-20333: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FT…cisa-kev · 2025-09-25
unknown[Update] Multiple vulnerabilities in Cisco ASA and FTD (September 25, 2025)cert-fr-alerte · 2025-09-25
criticalexploitedCVE-2025-20362: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FT…cisa-kev · 2025-09-25
criticalexploitedCVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerabilitycisa-kev · 2024-11-12
criticalexploitedCVE-2024-20481: Cisco ASA and FTD Denial-of-Service Vulnerabilitycisa-kev · 2024-10-24
criticalexploitedCVE-2024-20353: Cisco ASA and FTD Denial of Service Vulnerabilitycisa-kev · 2024-04-24

CVE-2024-20359: Cisco ASA and FTD Privilege Escalation Vulnerability

CSIRTS triage

Details

Exploitation outlook

Referenced CVEs

Same CVEs, other sources

Recent advisories for Cisco ASA and

More from CISA Known Exploited Vulnerabilities