---
title: "SECURITY ALERT: Multiple Cisco Security CVE's for the ASA Firewalls"
description: Systems Engineering is aware of three vulnerabilities affecting the Cisco ASAL CVE-2024-20353, CCVE-2024-20358, and CVE-2024-20359.
image: https://blog.systemsengineering.com/hubfs/Security%20Alert_Systems%20Engineering.png
---

[![header-logo](https://blog.systemsengineering.com/hs-fs/hubfs/header-logo.png?width=138&name=header-logo.png)](https://www.systemsengineering.com)

888.624.6737

<https://www.linkedin.com/company/systemsengineering-><https://www.facebook.com/systemsengineeringinc>

![Spyglass](https://www.systemsengineering.com/wp-content/uploads/search-google-e1751908066340.png)

- [Careers](https://www.systemsengineering.com/about/careers/)
- [Blog](https://blog.systemsengineering.com/blog)
- [Events](https://www.systemsengineering.com/news-resources/events/)
- [Case Studies](https://www.systemsengineering.com/case-studies/)
- [Client Center](https://www.systemsengineering.com/client-center/)
- [CONTACT](https://www.systemsengineering.com/about/contact/)

- IT Services 
    - [Managed IT](https://www.systemsengineering.com/managed-it/) 
          - [IT Essentials](https://www.systemsengineering.com/managed-it/it-essentials/)
          - [Microsoft Services](https://www.systemsengineering.com/managed-it/microsoft-services/)
          - [Modern Workplace](https://www.systemsengineering.com/managed-it/modern-desktop/)
          - [Help Desk](https://www.systemsengineering.com/managed-it/help-desk/)
          - [Network Assessment](https://www.systemsengineering.com/managed-it/network-assessment/)
    - [IT Consulting Services](https://www.systemsengineering.com/it-consulting-services/) 
          - [Compliance](https://www.systemsengineering.com/compliance)
          - [IT Policies-as-a-Service](https://www.systemsengineering.com/it-consulting-services/it-policies-as-a-service/)
          - [Virtual CIO](https://www.systemsengineering.com/it-consulting-services/virtual-cio/)
          - [Engineering Services](https://www.systemsengineering.com/it-consulting-services/engineering-services/)
          - [Project Management](https://www.systemsengineering.com/it-consulting-services/project-management/)
          - [Business Continuity](https://www.systemsengineering.com/it-consulting-services/business-continuity/)
          - [Assessments & Gap Analyses](https://www.systemsengineering.com/it-consulting-services/get-it-assessed/)
    - [Software Services](https://www.systemsengineering.com/software-services/) 
          - [Application Development](https://www.systemsengineering.com/software-services/application-development/)
          - [SharePoint](https://www.systemsengineering.com/software-services/sharepoint/)
          - [Database Services](https://www.systemsengineering.com/software-services/database-services/)
- [IT Security](https://www.systemsengineering.com/security/) 
    - [Adaptive Cybersecurity Framework (aCSF)](https://www.systemsengineering.com/se-adaptive-cybersecurity-framework-acsf/)
    - [Cloud Security](https://www.systemsengineering.com/security/cloud-security/) 
          - [Cloud Security Resources](https://www.systemsengineering.com/security/cloud-security/cloud-security-resources/)
    - [Security Awareness Training](https://www.systemsengineering.com/security/security-awareness-training/)
    - [Cybersecurity Risk Assessment](https://www.systemsengineering.com/security/cybersecurity-risk-assessment/)
- [Compliance](https://www.systemsengineering.com/compliance/) 
    - [Cybersecurity Maturity Model Certification (CMMC)](https://www.systemsengineering.com/compliance/cmmc-compliance/) 
          - [CMMC Compliance Service](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-compliance-service/)
          - [CMMC Resources](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-resources/)
    - [National Credit Union Administration (NCUA)](https://www.systemsengineering.com/compliance/ncua/)
- [Cloud Services](https://www.systemsengineering.com/cloud-services/) 
    - [Cloud Management](https://www.systemsengineering.com/cloud-services/cloud-management/)
    - [Cloud Security](https://www.systemsengineering.com/security/cloud-security/)
    - [Office 365 Migration & Support](https://www.systemsengineering.com/cloud-services/office-365-migration-support/) 
          - [Office 365 Backup](https://www.systemsengineering.com/cloud-services/office-365-migration-support/office-365-backup/)
    - [Cloud Assessment](https://www.systemsengineering.com/cloud-services/cloud-assessment/)
- [Industries](https://www.systemsengineering.com/industries/) 
    - [Construction](https://www.systemsengineering.com/industries/construction/)
    - [Education](https://www.systemsengineering.com/industries/education/)
    - [Financial Services](https://www.systemsengineering.com/industries/financial-services/) 
          - [Accountants & Wealth Managers](https://www.systemsengineering.com/industries/financial-services/accountants-wealth-managers/)
          - [Banks](https://www.systemsengineering.com/industries/financial-services/banks/)
          - [Credit Unions](https://www.systemsengineering.com/industries/financial-services/credit-unions/)
    - [Government](https://www.systemsengineering.com/industries/government/)
    - [Healthcare](https://www.systemsengineering.com/industries/healthcare/)
    - [Law Firms](https://www.systemsengineering.com/industries/legal/)
    - [Manufacturers](https://www.systemsengineering.com/industries/manufacturer/)
    - [Nonprofit](https://www.systemsengineering.com/industries/nonprofits/)
- [About](https://www.systemsengineering.com/about/) 
    - [Leadership](https://www.systemsengineering.com/about/leadership/)
    - [Our Difference](https://www.systemsengineering.com/about/our-difference/)
    - [Our Partners](https://www.systemsengineering.com/about/our-partners/)
    - [Culture](https://www.systemsengineering.com/culture/)
    - [Contact](https://www.systemsengineering.com/about/contact/)

- Managed IT 
    - [Overview](https://www.systemsengineering.com/managed-it/)
    - [IT Essentials](https://www.systemsengineering.com/managed-it/it-essentials/)
    - [Microsoft Services](https://www.systemsengineering.com/managed-it/microsoft-services/)
    - [Modern Workplace](https://www.systemsengineering.com/managed-it/modern-workplace/)
    - [Help Desk](https://www.systemsengineering.com/managed-it/help-desk/)
    - [Network Assesment](https://www.systemsengineering.com/managed-it/network-assessment/)
- IT Consulting Services 
    - [Overview](https://www.systemsengineering.com/it-consulting-services/)
    - [Virtual CIO](https://www.systemsengineering.com/it-consulting-services/virtual-cio/)
    - [CMMC Compliance](https://www.systemsengineering.com/compliance/cmmc-compliance/)
    - [IT Policies-as-a-Service](https://www.systemsengineering.com/it-consulting-services/it-policies-as-a-service/)
    - [Engineering Services](https://www.systemsengineering.com/it-consulting-services/engineering-services/)
    - [Project Management](https://www.systemsengineering.com/it-consulting-services/project-management/)
    - [Business Continuity](https://www.systemsengineering.com/it-consulting-services/business-continuity/)
    - [Assessments & Gap Analyses](https://www.systemsengineering.com/it-consulting-services/get-it-assessed/)
- Software Services 
    - [Overview](https://www.systemsengineering.com/software-services/)
    - [Application Development](https://www.systemsengineering.com/software-services/application-development/)
    - [SharePoint](https://www.systemsengineering.com/software-services/sharepoint/)
    - [Database Services](https://www.systemsengineering.com/software-services/database-services/)
- IT Security 
    - [Overview](https://www.systemsengineering.com/security/)
    - [Adaptive Cybersecurity Framework (aCSF)](https://www.systemsengineering.com/se-adaptive-cybersecurity-framework-acsf/)
    - Cloud Security 
          - [Service Overview](https://www.systemsengineering.com/security/cloud-security/)
          - [Cloud Security Resources](https://www.systemsengineering.com/security/cloud-security/cloud-security-resources/)
    - [Security Awareness Training](https://www.systemsengineering.com/security/security-awareness-training/)
    - [Cybersecurity Risk Assesment](https://www.systemsengineering.com/security/cybersecurity-risk-assessment/)
- Compliance 
    - [Overview](https://www.systemsengineering.com/compliance/)
    - [Cybersecurity Maturity Model Certification (CMMC)](https://www.systemsengineering.com/compliance/cmmc-compliance/) 
          - [CMMC Compliance Service](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-compliance-service/)
          - [CMMC Gap Analysis](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-gap-analysis/)
          - [CMMC Resources Hub](https://www.systemsengineering.com/compliance/cmmc-compliance/cmmc-resources/)
    - [National Credit Union Administration (NCUA)](https://www.systemsengineering.com/compliance/ncua/)
- Cloud Services 
    - [Overview](https://www.systemsengineering.com/cloud-services/)
    - [Cloud Management](https://www.systemsengineering.com/cloud-services/cloud-management/)
    - [Cloud Security](https://www.systemsengineering.com/cloud-services/cloud-migration/)
    - Office 365 
          - [Office 365 Migration & Support](https://www.systemsengineering.com/cloud-services/office-365-migration-support/)
          - [Office 365 Backup](https://www.systemsengineering.com/cloud-services/office-365-migration-support/office-365-backup/)
    - [Cloud Assessment](https://www.systemsengineering.com/cloud-services/cloud-assessment/)
- Industries 
    - [Overview](https://www.systemsengineering.com/industries/)
    - [Construction](https://www.systemsengineering.com/industries/construction/)
    - [Education](https://www.systemsengineering.com/industries/education/)
    - [Financial Services](https://www.systemsengineering.com/industries/financial-services/) 
          - [Banks](https://www.systemsengineering.com/industries/financial-services/banks/)
          - [Credit Unions](https://www.systemsengineering.com/industries/financial-services/credit-unions/)
          - [Accountants & Wealth Managers](https://www.systemsengineering.com/industries/financial-services/accountants-wealth-managers/)
    - [Government](https://www.systemsengineering.com/industries/government/)
    - [Healthcare](https://www.systemsengineering.com/industries/healthcare/)
    - [Legal](https://www.systemsengineering.com/industries/legal/)
    - [Manufacturers](https://www.systemsengineering.com/industries/manufacturers/)
    - [Nonprofits](https://www.systemsengineering.com/industries/nonprofits/)
- About 
    - [Overview](https://www.systemsengineering.com/about/)
    - [Leadership](https://www.systemsengineering.com/about/leadership/)
    - [Our Difference](https://www.systemsengineering.com/about/our-difference/)
    - [Employee-Owned](https://www.systemsengineering.com/about/esop/)
    - [Our Partners](https://www.systemsengineering.com/about/our-partners/)
    - Careers & Internships 
          - [Openings](https://www.systemsengineering.com/about/careers/)
          - [Benefits](https://www.systemsengineering.com/about/careers/benefits/)
          - [Internships](https://www.systemsengineering.com/about/careers/internships/)
    - [Culture](https://www.systemsengineering.com/culture/)
- [Case Studies](https://www.systemsengineering.com/case-studies/)
- [Blog](https://blog.systemsengineering.com/blog)
- [Events](https://www.systemsengineering.com/events/)
- [Client Center](https://www.systemsengineering.com/client-center/)
- [Contact](https://www.systemsengineering.com/about/contact/)

888.624.6737

[Email Us](mailto:info@systemsengineering.com)

![syse-blog-header](https://blog.systemsengineering.com/hs-fs/hubfs/Logos/syse-blog-header.jpg?width=1440&name=syse-blog-header.jpg "syse-blog-header")

# SECURITY ALERT: Multiple Cisco Security CVE's for the ASA Firewalls

[![Share on facebook](https://blog.systemsengineering.com/hs-fs/hubfs/facebook-color.png?width=60&name=facebook-color.png)](http://www.facebook.com/share.php?u=https://blog.systemsengineering.com/blog/security-alert-multiple-cisco-security-cves-for-the-asa-firewalls&utm_medium=social&utm_source=facebook) [![Share on linkedin](https://blog.systemsengineering.com/hs-fs/hubfs/linkedin-color.png?width=60&name=linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.systemsengineering.com/blog/security-alert-multiple-cisco-security-cves-for-the-asa-firewalls&utm_medium=social&utm_source=linkedin) [![Share on email](https://blog.systemsengineering.com/hs-fs/hubfs/email-color.png?width=60&name=email-color.png)](mailto:?subject=Check%20out%20https://blog.systemsengineering.com/blog/security-alert-multiple-cisco-security-cves-for-the-asa-firewalls&utm_medium=social&utm_source=email%20&body=Check%20out%20https://blog.systemsengineering.com/blog/security-alert-multiple-cisco-security-cves-for-the-asa-firewalls&utm_medium=social&utm_source=email) 

 April 29, 2024 | Posted in:

[Security Bulletins & Alerts](https://blog.systemsengineering.com/blog/topic/security-bulletins-alerts)

Posted by [Systems Engineering](https://blog.systemsengineering.com/blog/author/systems-engineering)

Systems Engineering is aware of three Vulnerabilities affecting the Cisco ASA; Cisco Adaptive Security Appliance Web Service Denial of Service Vulnerability - CVE-2024-20353, Cisco Adaptive Security Appliance Command Injection Vulnerability - CVE-2024-20358, and Cisco Adaptive Security Appliance Persistent Local Code Execution Vulnerability - CVE-2024-20359.

Cisco rates CVE-2024-50358 vulnerability as MEDIUM. CVE-2024-20353 and CVE-2024-0359 vulnerabilities are rated **HIGH.** 

*Note: This is potentially being exploited in the wild according to Cisco and multiple government agencies. *

## Description

These vulnerabilities affect the SSLVPN service and the Restore functionality of these Cisco devices. They can allow malicious actors to execute arbitrary code, perform DOS (Denial of Service) attacks, or upload malicious files to the affected systems. Some of these vulnerabilities require root-level privileges, and others do not. 

## Scope

These vulnerabilities are specific to clients with Cisco ASA’s and Firepower Firewalls. All makes and models below a certain version are affected. Click on individual CVE links below to be directly taken to the Cisco Security Advisory:

- Cisco Adaptive Security Appliance Web Service Denial of Service Vulnerability ([CVE-2024-20353](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2)) 
- Cisco Adaptive Security Appliance Command Injection Vulnerability ([CVE-2024-20358](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm)) 
- Cisco Adaptive Security Appliance Persistent Local Code Execution Vulnerability ([CVE-2024-20359](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h)) 

## Course of Action

Cisco has released a patch to remediate affected systems. Systems Engineering is recommending a firmware version of 9.12.4.67 to remediate this vulnerability. 

- For Systems Engineering contracted clients, we will be proactively patching for this vulnerability and will be in contact with you with details about the remediation schedule.  
- For all other clients, we recommend you have your affected systems patched for this vulnerability. If you would like our assistance with patching, please reach out to Systems Engineering Customer Service at 207.772.4199 to have a ticket opened to get your system updated.   

If you are a Systems Engineering client and have questions about this Security Alert, please contact your Account Manager. 

### Join the Conversation!

### Posts by Category

- [IT Solutions & Support (70)](https://blog.systemsengineering.com/blog/topic/it-solutions-support)
- [Announcements (64)](https://blog.systemsengineering.com/blog/topic/announcements)
- [Security Bulletins & Alerts (59)](https://blog.systemsengineering.com/blog/topic/security-bulletins-alerts)
- [Cybersecurity (55)](https://blog.systemsengineering.com/blog/topic/cybersecurity)
- [Business Transformation (30)](https://blog.systemsengineering.com/blog/topic/business-transformation)
- [Cloud Security (27)](https://blog.systemsengineering.com/blog/topic/cloud-security)
- [Workforce Enablement (21)](https://blog.systemsengineering.com/blog/topic/workforce-enablement)
- [Compliance (17)](https://blog.systemsengineering.com/blog/topic/compliance)
- [Network Security (13)](https://blog.systemsengineering.com/blog/topic/network-security)
- [Artificial Intelligence (10)](https://blog.systemsengineering.com/blog/topic/artificial-intelligence)

### Follow Us On Social

<https://www.linkedin.com/company/systemsengineering-> <https://twitter.com/sysengineering> <https://www.facebook.com/systemsengineeringinc>

### Contact Us

[888.624.6737](tel:888.624.6737)  
[info@systemsengineering.com](mailto:info@systemsengineering.com)

### Connect With Us

<https://www.linkedin.com/company/systemsengineering-> <https://www.facebook.com/systemsengineeringinc>

### Receive Our Blog

- [IT Services](https://www.systemsengineering.com/)
- [IT Security](https://www.systemsengineering.com/security/)
- [Compliance](https://www.systemsengineering.com/compliance/)
- [Cloud Services](https://www.systemsengineering.com/cloud-services/)
- [Industries](https://www.systemsengineering.com/industries/)
- [About](https://www.systemsengineering.com/about/)

- [Careers](https://www.systemsengineering.com/about/careers/)
- [White Papers](https://www.systemsengineering.com/white-papers/)
- [Case Studies](https://www.systemsengineering.com/case-studies/)
- [Blog](https://blog.systemsengineering.com/blog)
- [Events](https://www.systemsengineering.com/news-resources/events/)
- [Client Center](https://www.systemsengineering.com/client-center/)

![Ft-logo](https://blog.systemsengineering.com/hs-fs/hubfs/Ft-logo.png?width=105&name=Ft-logo.png)

 

 

888.624.6737 | [info@systemsengineering.com](mailto:info@systemsengineering.com)

Copyright 2025 Systems Engineering. All Rights Reserved. [Privacy Policy](https://www.systemsengineering.com/privacy-policy) [Support](https://www.systemsengineering.com/support/) [Trust Center](https://systems.app.ctrlmap.com/tp/trust/portal/links?puid=8010ba57-5a2e-40b4-9c56-2c18873c9e5f&trustPortalId=MQ==&code=4642)