CVE-2024-20485

score

<0.1

cvss

6.0

epss

0.2%

published

2024-10-23

kev added

—

first seen

2026-10-21

Cisco ASA and FTD Software contain a remote code execution caused by improper validation of backup files read from flash memory, letting authenticated, local attackers execute arbitrary code with root privileges, exploit requires administrator privileges and restoring a crafted backup file.