CVE-2024-20526

A vulnerability in the SSH server of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for the SSH server of an affected device. This vulnerability is due to a logic error when an SSH session is established. An attacker could exploit this vulnerability by sending crafted SSH messages to an affected device. A successful exploit could allow the attacker to exhaust available SSH resources on the affected device so that new SSH connections to the device are denied, resulting in a DoS condition. Existing SSH connections to the device would continue to function normally. The device must be rebooted manually to recover. However, user traffic would not be impacted and could be managed using a remote application such as Cisco Adaptive Security Device Manager (ASDM).

• CWE-400
• CWE-770

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-dos-eEDWu5RMMitigation, Vendor Advisory

Published

Oct 23, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20520A vulnerability in the web-based management interface of Cis…9.1
• CVE-2024-20521A vulnerability in the web-based management interface of Cis…9.1
• CVE-2024-20522A vulnerability in the web-based management interface of Cis…6.8
• CVE-2024-20523A vulnerability in the web-based management interface of Cis…6.8
• CVE-2024-20524A vulnerability in the web-based management interface of Cis…6.8
• CVE-2024-20525A vulnerability in the web-based management interface of Cis…6.1
• CVE-2024-20527A vulnerability in the API of Cisco ISE could allow an authe…5.5
• CVE-2024-20528A vulnerability in the API of Cisco ISE could allow an authe…7.2
• CVE-2024-20529A vulnerability in the API of Cisco ISE could allow an authe…5.5
• CVE-2024-2053The Artica Proxy administrative web application will deseria…7.5
• CVE-2024-20530A vulnerability in the web-based management interface of Cis…6.1
• CVE-2024-20531A vulnerability in the API of Cisco ISE could allow an authe…6.5