CVE-2024-20359CISA KEVEPSS p97.3%

CVE-2024-20359Cisco ASA and FTD Privilege Escalation Vulnerability

Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

Description

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.

Scoring

CVSS 6.0 ()
VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS19.43% probability of exploitation · percentile 97.3% · 2026-10-05T12:00:23Z
Last modified2026-08-11

CISA KEV entry

Added to KEV: 2024-04-24

(incoming)1

TypeTargetConfidenceTier
KEVEntryCisco ASA and FTD Privilege Escalation Vulnerabilitykev-cve-2024-203590%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Cisco ASA and FTD Denial of Service Vulnerability
CVE
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
CVE
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
CVE
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
CVE
CVE-2025-20363
CVE
CVE-2026-20016
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.