Cisco ASA check for CVE-2024-20353 | CVE-2024-20359

To check if the above CVE's are present on your Cisco ASA you will need to preform the below steps.

• First you will need to use the above metric to return a list of your ASA's software versions

  • If your ASA version returns a value with parentheses () remove the () and replace with a period .

  • Example: 9.14(4)23 will be 9.14.4.23

• After you have your ASA Software Version you will use the Cisco Software checker for each CVE and add the software version to check if the device is effected

  • CVE-2024-20353

    • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2

  • CVE-2024-20359

    • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h

• You will need to use the Cisco Checker to confirm if the specific versions of your ASA are effected