CVE-2024-20353
CWE-835
96.3
RPSRPS range: 0–105; KEV-listed vulnerabilities can receive an exploitation amplifier.
Description
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.
Source: NVD
Signals
- CVSS
- 8.6
- High · v3.1
- EPSS
- 70.68%
- Probability of exploitation in the next 30 days (FIRST)
- CISA KEV
- In CISA KEV since Apr 2024
- Fix commit
- No known fix commit
- Sources: MoreFixes, FreshFixes
- Weakness
- CWE-835
- Published
- 24 Apr 2024
- Last modified 11 Aug 2026
How to read these signals: RPS · EPSS · CISA KEV · Data sources
Get this score from the API
curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
https://api.intelligence.devsecure.io/api/v1/rps/CVE-2024-20353Replace the placeholder with your key. Get a free API key or rank your own CVEs.
Data as of 7 Oct 2026, 05:16 UK time