On April 24, 2024, Cisco released two high-severity security advisories that impact both their Cisco ASA and Cisco FTD firewalls as follows:
CVE-2024-20353 – https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2
CVE-2024-20359 – https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h
Based on the advisories there is no workaround available for either vulnerabilities mentioned above at this point. Cisco has released patches for both the above-mentioned vulnerabilities. Update to the latest version ASAP to prevent potential disruption.
Our threat hunting team has been informed and is actively investigating for signs of compromise of this threat. The CyberMaxx team is continuing to monitor this situation and is working to keep your network safe.
