CVE-2024-20331

score

<0.1

cvss

6.8

epss

0.7%

published

2024-10-23

kev added

—

first seen

2026-10-21

Cisco ASA and FTD Software contain a session authentication vulnerability caused by insufficient entropy in the authentication process, letting unauthenticated remote attackers terminate user sessions, exploit requires attacker to determine user handle.