---
title: "Security digest: February 15, 2024"
url: https://erroneo.us/security/2024-02-15/
description: "February 15, 2024 vulnerability digest: 2 CISA KEV additions (Cisco, Microsoft). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2024-02-15
date_modified: 2024-02-15
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: February 15, 2024

2 known exploited (cisa kev) additions.

## Take stock

- Do you run any of these? Microsoft Exchange Server, Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2024-03-07.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2024-21410](https://erroneo.us/security/cve/CVE-2024-21410/index.md) Microsoft Exchange Server: Microsoft Exchange Server Privilege Escalation Vulnerability (CISA due 2024-03-07)
- [CVE-2020-3259](https://erroneo.us/security/cve/CVE-2020-3259/index.md) Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD): Cisco ASA and FTD Information Disclosure Vulnerability (CISA due 2024-03-07)

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2024-02-15/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt