{"id":6079,"date":"2024-05-27T17:15:19","date_gmt":"2024-05-27T23:15:19","guid":{"rendered":"https:\/\/beaconlab.mx\/?post_type=publicacion&#038;p=6079"},"modified":"2024-10-22T08:19:38","modified_gmt":"2024-10-22T13:19:38","slug":"2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/","title":{"rendered":"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\"><strong>Affected Product(s):<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Firepower Management Center (FMC)<\/strong><\/li>\n\n\n\n<li><strong>Cisco Adaptive Security Appliance (ASA)<\/strong><\/li>\n\n\n\n<li><strong>Cisco Firepower Threat Defense (FTD)<\/strong><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Description:<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cisco has addressed a set of vulnerabilities identified as <strong>CVE-2024-20355<\/strong>, <strong>CVE-2024-20363<\/strong>, <strong>CVE-2024-20261<\/strong>, <strong>CVE-2024-20361<\/strong>, <strong>CVE-2024-20293<\/strong>, and <strong>CVE-2024-20360<\/strong>, with the latter being the most critical, having a severity score of <strong>8.8<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These vulnerabilities affect <strong>Cisco ASA<\/strong>, <strong>FTD<\/strong>, and <strong>FMC<\/strong> products. The most significant risk lies in the <strong>FMC web management interface<\/strong>, where an <strong>SQL injection vulnerability<\/strong> allows an attacker to manipulate SQL queries to obtain data from the database, execute commands on the host system, and escalate privileges. To exploit this vulnerability, an attacker must first possess the credentials of a user with read permissions on the management interface.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is important to note that, as of today, there have been no recorded exploits of this vulnerability. The recently published patch mitigates this and the other mentioned vulnerabilities, including those involved in the attack campaign known as <strong>ArcaneDoor<\/strong>, which aimed to compromise Cisco ASA and FTD devices to implant malware, execute commands, and exfiltrate data from compromised devices.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Impact:<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A malicious actor who has gained access to the network can exploit these vulnerabilities to manipulate the local database and execute malicious commands, gaining persistence on the machine hosting <strong>FMC<\/strong> and increasing their ability to attack the internal network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Additionally, the previously mentioned medium-severity vulnerabilities are related to evading application rules or configurations, which could allow an attacker to bypass them.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Solution:<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Apply the official patch published by Cisco.<\/p>\n","protected":false},"featured_media":6080,"template":"","class_list":["post-6079","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Affected Product(s): Firepower Management Center (FMC) Cisco Adaptive Security Appliance (ASA) Cisco Firepower Threat Defense (FTD) Description: Cisco has addressed a set of vulnerabilities identified as CVE-2024-20355, CVE-2024-20363, CVE-2024-20261, CVE-2024-20361, CVE-2024-20293, and CVE-2024-20360, with the latter being the most critical, having a severity score of 8.8. These vulnerabilities affect Cisco ASA, FTD, and FMC products.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"Affected Product(s): Firepower Management Center (FMC) Cisco Adaptive Security Appliance (ASA) Cisco Firepower Threat Defense (FTD) Description: Cisco has addressed a set of vulnerabilities identified as CVE-2024-20355, CVE-2024-20363, CVE-2024-20261, CVE-2024-20361, CVE-2024-20293, and CVE-2024-20360, with the latter being the most critical, having a severity score of 8.8. These vulnerabilities affect Cisco ASA, FTD, and FMC products.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/Sin-titulo.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/Sin-titulo.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"217\" \/>\n\t\t<meta property=\"og:image:height\" content=\"232\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-05-27T23:15:19+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-10-22T13:19:38+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Affected Product(s): Firepower Management Center (FMC) Cisco Adaptive Security Appliance (ASA) Cisco Firepower Threat Defense (FTD) Description: Cisco has addressed a set of vulnerabilities identified as CVE-2024-20355, CVE-2024-20363, CVE-2024-20261, CVE-2024-20361, CVE-2024-20293, and CVE-2024-20360, with the latter being the most critical, having a severity score of 8.8. These vulnerabilities affect Cisco ASA, FTD, and FMC products.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/Sin-titulo.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/#listItem\",\"name\":\"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/#listItem\",\"position\":2,\"name\":\"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/\",\"name\":\"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD - Beacon Lab\",\"description\":\"Affected Product(s): Firepower Management Center (FMC) Cisco Adaptive Security Appliance (ASA) Cisco Firepower Threat Defense (FTD) Description: Cisco has addressed a set of vulnerabilities identified as CVE-2024-20355, CVE-2024-20363, CVE-2024-20261, CVE-2024-20361, CVE-2024-20293, and CVE-2024-20360, with the latter being the most critical, having a severity score of 8.8. These vulnerabilities affect Cisco ASA, FTD, and FMC products.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/Sin-titulo.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/#mainImage\",\"width\":217,\"height\":232},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\\\/#mainImage\"},\"datePublished\":\"2024-05-27T17:15:19-06:00\",\"dateModified\":\"2024-10-22T08:19:38-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD - Beacon Lab","description":"Affected Product(s): Firepower Management Center (FMC) Cisco Adaptive Security Appliance (ASA) Cisco Firepower Threat Defense (FTD) Description: Cisco has addressed a set of vulnerabilities identified as CVE-2024-20355, CVE-2024-20363, CVE-2024-20261, CVE-2024-20361, CVE-2024-20293, and CVE-2024-20360, with the latter being the most critical, having a severity score of 8.8. These vulnerabilities affect Cisco ASA, FTD, and FMC products.","canonical_url":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/#listItem","name":"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/#listItem","position":2,"name":"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/en\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/en\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/#webpage","url":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/","name":"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD - Beacon Lab","description":"Affected Product(s): Firepower Management Center (FMC) Cisco Adaptive Security Appliance (ASA) Cisco Firepower Threat Defense (FTD) Description: Cisco has addressed a set of vulnerabilities identified as CVE-2024-20355, CVE-2024-20363, CVE-2024-20261, CVE-2024-20361, CVE-2024-20293, and CVE-2024-20360, with the latter being the most critical, having a severity score of 8.8. These vulnerabilities affect Cisco ASA, FTD, and FMC products.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/beaconlab.us\/en\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/Sin-titulo.png","@id":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/#mainImage","width":217,"height":232},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/#mainImage"},"datePublished":"2024-05-27T17:15:19-06:00","dateModified":"2024-10-22T08:19:38-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/en\/#website","url":"https:\/\/beaconlab.us\/en\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"en-US","publisher":{"@id":"https:\/\/beaconlab.us\/en\/#organization"}}]},"og:locale":"en_US","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD - Beacon Lab","og:description":"Affected Product(s): Firepower Management Center (FMC) Cisco Adaptive Security Appliance (ASA) Cisco Firepower Threat Defense (FTD) Description: Cisco has addressed a set of vulnerabilities identified as CVE-2024-20355, CVE-2024-20363, CVE-2024-20261, CVE-2024-20361, CVE-2024-20293, and CVE-2024-20360, with the latter being the most critical, having a severity score of 8.8. These vulnerabilities affect Cisco ASA, FTD, and FMC products.","og:url":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/Sin-titulo.png","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/Sin-titulo.png","og:image:width":217,"og:image:height":232,"article:published_time":"2024-05-27T23:15:19+00:00","article:modified_time":"2024-10-22T13:19:38+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD - Beacon Lab","twitter:description":"Affected Product(s): Firepower Management Center (FMC) Cisco Adaptive Security Appliance (ASA) Cisco Firepower Threat Defense (FTD) Description: Cisco has addressed a set of vulnerabilities identified as CVE-2024-20355, CVE-2024-20363, CVE-2024-20261, CVE-2024-20361, CVE-2024-20293, and CVE-2024-20360, with the latter being the most critical, having a severity score of 8.8. These vulnerabilities affect Cisco ASA, FTD, and FMC products.","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/05\/Sin-titulo.png"},"aioseo_meta_data":{"post_id":"6079","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2024-10-17 23:40:52","updated":"2025-09-24 06:09:22","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/en\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/en\/"},{"label":"Alert 2024-11 Critical Security Update for Cisco FMC, ASA, and FTD","link":"https:\/\/beaconlab.us\/en\/publication\/2024-11-critical-security-update-for-cisco-fmc-asa-and-ftd\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/6079","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/6079\/revisions"}],"predecessor-version":[{"id":7561,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/6079\/revisions\/7561"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media\/6080"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media?parent=6079"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}