Cisco ASA and FTD Information Disclosure Vulnerability
CISA lists this Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.
- Product
- Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
- Added to KEV
- 15 Feb 2024
- Federal remediation due
- 7 Mar 2024
- Known ransomware use
- Yes
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.