CVE-2024-20329

The vulnerability stems from insufficient input validation in the SSH subsystem. An attacker with access to the remote CLI via SSH can send crafted input data during remote command execution. Improper processing of this data by the system results in the execution of arbitrary commands at the operating system level with root privileges (privilege escalation).

An attacker can execute arbitrary operating system commands with root privileges, which means complete takeover of the Cisco ASA device — including the ability to modify configuration, read sensitive data, and disrupt the operation of the network device.

Apply patches available from the vendor according to the references — detailed information about patched versions is contained in the Cisco Security Advisory available at: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-rce-gRAuPEUF. It is also recommended to restrict SSH access to ASA devices exclusively to trusted administrative hosts.

Cisco Adaptive Security Appliance (ASA) Software — specific versions indicated in the vendor references (Cisco Security Advisory cisco-sa-asa-ssh-rce-gRAuPEUF)