CVE-2024-20261

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A logic error in the file policy feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured file policy to block an encrypted archive file. This could be exploited by sending a crafted, encrypted archive file through the affected device, potentially allowing malware to be sent. The vulnerability is related to insufficient access control in the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.