Cisco Remote Access SSL VPN Vulnerability Could Lead to Temporary Denial of Service

CVE-2024-20493

Summary

A vulnerability exists in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software. This issue arises from inadequate management of memory resources during the authentication process. By sending specially crafted packets, an unauthenticated, remote attacker may exploit this vulnerability, leading to resource exhaustion in the authentication process. As a result, this can temporarily prevent Remote Access SSL VPN users from authenticating for several minutes, effectively creating a denial of service condition.

References