Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-20245

Published: 01/11/2023 Updated: 25/01/2024
CVSS v3 Base Score: 5.8 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Adaptive Security Appliance Software

Vulnerability Summary

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. These vulnerabilities are due to a logic error that could occur when the affected software constructs and applies per-user-override rules. An attacker could exploit these vulnerabilities by connecting to a network through an affected device that has a vulnerable configuration. A successful exploit could allow the malicious user to bypass the interface ACL and access resources that would should be protected.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco adaptive security appliance software 9.16.1

cisco adaptive security appliance software 9.8.3.18

cisco adaptive security appliance software 9.8.3.26

cisco adaptive security appliance software 9.12.2

cisco adaptive security appliance software 9.8.3.16

cisco adaptive security appliance software 9.8.4.29

cisco adaptive security appliance software 9.12.2.5

cisco adaptive security appliance software 9.12.4.4

cisco adaptive security appliance software 9.8.4

cisco adaptive security appliance software 9.8.4.26

cisco adaptive security appliance software 9.14.1.30

cisco adaptive security appliance software 9.14.1.15

cisco adaptive security appliance software 9.8.4.8

cisco adaptive security appliance software 9.8.4.10

cisco adaptive security appliance software 9.8.4.12

cisco adaptive security appliance software 9.8.4.15

cisco adaptive security appliance software 9.8.4.45

cisco adaptive security appliance software 9.12.3.2

cisco adaptive security appliance software 9.12.3.7

cisco adaptive security appliance software 9.12.4

cisco adaptive security appliance software 9.12.3.12

cisco adaptive security appliance software 9.12.4.37

cisco adaptive security appliance software 9.12.4.38

cisco adaptive security appliance software 9.12.4.39

cisco adaptive security appliance software 9.14.2

cisco adaptive security appliance software 9.14.2.4

cisco adaptive security appliance software 9.14.2.8

cisco adaptive security appliance software 9.14.2.13

cisco adaptive security appliance software 9.14.2.15

cisco adaptive security appliance software 9.15.1.15

cisco adaptive security appliance software 9.15.1.16

cisco adaptive security appliance software 9.15.1.17

cisco adaptive security appliance software 9.15.1.1

cisco adaptive security appliance software 9.8.4.25

cisco adaptive security appliance software 9.17.1

cisco adaptive security appliance software 9.8.3.29

cisco adaptive security appliance software 9.8.4.3

cisco adaptive security appliance software 9.8.4.20

cisco adaptive security appliance software 9.8.4.41

cisco adaptive security appliance software 9.8.4.44

cisco adaptive security appliance software 9.12.3

cisco adaptive security appliance software 9.12.3.9

cisco adaptive security appliance software 9.12.4.26

cisco adaptive security appliance software 9.12.4.30

cisco adaptive security appliance software 9.14.1.10

cisco adaptive security appliance software 9.14.1.19

cisco adaptive security appliance software 9.14.3

cisco adaptive security appliance software 9.14.3.9

cisco adaptive security appliance software 9.15.1

cisco adaptive security appliance software 9.15.1.10

cisco adaptive security appliance software 9.15.1.21

cisco adaptive security appliance software 9.16.1.28

cisco adaptive security appliance software 9.17.1.7

cisco adaptive security appliance software 9.16.3.14

cisco adaptive security appliance software 9.16.4

cisco adaptive security appliance software 9.18.2.5

cisco adaptive security appliance software 9.17.1.10

cisco adaptive security appliance software 9.17.1.13

cisco adaptive security appliance software 9.18.1

cisco adaptive security appliance software 9.18.1.3

cisco adaptive security appliance software 9.8.3.21

cisco adaptive security appliance software 9.8.4.32

cisco adaptive security appliance software 9.8.4.33

cisco adaptive security appliance software 9.8.4.34

cisco adaptive security appliance software 9.8.4.35

cisco adaptive security appliance software 9.8.4.39

cisco adaptive security appliance software 9.12.1

cisco adaptive security appliance software 9.12.1.2

cisco adaptive security appliance software 9.12.1.3

cisco adaptive security appliance software 9.12.4.10

cisco adaptive security appliance software 9.12.4.13

cisco adaptive security appliance software 9.12.4.8

cisco adaptive security appliance software 9.12.4.18

cisco adaptive security appliance software 9.14.1

cisco adaptive security appliance software 9.14.3.13

cisco adaptive security appliance software 9.14.3.18

cisco adaptive security appliance software 9.14.3.15

cisco adaptive security appliance software 9.14.4

cisco adaptive security appliance software 9.16.2.3

cisco adaptive security appliance software 9.16.2.7

cisco adaptive security appliance software 9.16.2.11

cisco adaptive security appliance software 9.16.2.13

cisco adaptive security appliance software 9.16.2.14

cisco adaptive security appliance software 9.14.4.7

cisco adaptive security appliance software 9.14.4.12

cisco adaptive security appliance software 9.17.1.11

cisco adaptive security appliance software 9.17.1.15

cisco adaptive security appliance software 9.8.4.22

cisco adaptive security appliance software 9.12.4.2

cisco adaptive security appliance software 9.17.1.9

cisco adaptive security appliance software 9.8.3.14

cisco adaptive security appliance software 9.8.4.7

cisco adaptive security appliance software 9.8.4.17

cisco adaptive security appliance software 9.8.4.40

cisco adaptive security appliance software 9.8.4.43

cisco adaptive security appliance software 9.12.2.4

cisco adaptive security appliance software 9.12.2.9

cisco adaptive security appliance software 9.12.2.1

cisco adaptive security appliance software 9.12.4.7

cisco adaptive security appliance software 9.12.4.24

cisco adaptive security appliance software 9.12.4.29

cisco adaptive security appliance software 9.12.4.35

cisco adaptive security appliance software 9.14.1.6

cisco adaptive security appliance software 9.14.3.1

cisco adaptive security appliance software 9.14.3.11

cisco adaptive security appliance software 9.14.4.6

cisco adaptive security appliance software 9.15.1.7

cisco adaptive security appliance software 9.16.2

cisco adaptive security appliance software 9.16.3.3

cisco adaptive security appliance software 9.16.3

cisco adaptive security appliance software 9.18.2

cisco adaptive security appliance software 9.8.4.48

cisco adaptive security appliance software 9.8.4.46

cisco adaptive security appliance software 9.19.1.9

cisco adaptive security appliance software 9.19.1.5

cisco adaptive security appliance software 9.19.1

cisco adaptive security appliance software 9.18.3

cisco adaptive security appliance software 9.18.2.8

cisco adaptive security appliance software 9.18.2.7

cisco adaptive security appliance software 9.17.1.30

cisco adaptive security appliance software 9.17.1.20

cisco adaptive security appliance software 9.16.4.9

cisco adaptive security appliance software 9.16.4.18

cisco adaptive security appliance software 9.16.4.14

cisco adaptive security appliance software 9.16.3.23

cisco adaptive security appliance software 9.16.3.19

cisco adaptive security appliance software 9.16.3.15

cisco adaptive security appliance software 9.14.4.23

cisco adaptive security appliance software 9.14.4.22

cisco adaptive security appliance software 9.14.4.17

cisco adaptive security appliance software 9.14.4.15

cisco adaptive security appliance software 9.14.4.14

cisco adaptive security appliance software 9.14.4.13

cisco adaptive security appliance software 9.12.4.56

cisco adaptive security appliance software 9.12.4.55

cisco adaptive security appliance software 9.12.4.54

cisco adaptive security appliance software 9.12.4.52

cisco adaptive security appliance software 9.12.4.50

cisco adaptive security appliance software 9.12.4.48

cisco adaptive security appliance software 9.12.4.47

cisco adaptive security appliance software 9.12.4.41

cisco adaptive security appliance software 9.12.4.40

cisco firepower threat defense 6.4.0

cisco firepower threat defense 6.2.3.13

cisco firepower threat defense 6.2.3.14

cisco firepower threat defense 6.2.3.15

cisco firepower threat defense 6.2.3.12

cisco firepower threat defense 6.6.0.1

cisco firepower threat defense 6.6.0

cisco firepower threat defense 7.1.0

cisco firepower threat defense 7.0.0

cisco firepower threat defense 6.7.0

cisco firepower threat defense 7.2.0.1

cisco firepower threat defense 7.0.1

cisco firepower threat defense 7.0.0.1

cisco firepower threat defense 7.0.1.1

cisco firepower threat defense 7.0.2

cisco firepower threat defense 7.0.2.1

cisco firepower threat defense 7.0.3

cisco firepower threat defense 7.0.4

cisco firepower threat defense 6.6.1

cisco firepower threat defense 6.6.3

cisco firepower threat defense 6.6.4

cisco firepower threat defense 6.6.5

cisco firepower threat defense 6.6.5.1

cisco firepower threat defense 6.6.5.2

cisco firepower threat defense 7.1.0.1

cisco firepower threat defense 7.1.0.2

cisco firepower threat defense 7.2.0

cisco firepower threat defense 6.2.3.3

cisco firepower threat defense 6.2.3.4

cisco firepower threat defense 6.2.3.5

cisco firepower threat defense 6.2.3.6

cisco firepower threat defense 6.2.3.7

cisco firepower threat defense 6.2.3.8

cisco firepower threat defense 6.2.3.10

cisco firepower threat defense 6.2.3.11

cisco firepower threat defense 6.2.3.9

cisco firepower threat defense 6.2.3.16

cisco firepower threat defense 6.2.3.17

cisco firepower threat defense 6.2.3.18

cisco firepower threat defense 6.4.0.1

cisco firepower threat defense 6.4.0.3

cisco firepower threat defense 6.4.0.2

cisco firepower threat defense 6.4.0.4

cisco firepower threat defense 6.4.0.5

cisco firepower threat defense 6.4.0.6

cisco firepower threat defense 6.4.0.7

cisco firepower threat defense 6.4.0.8

cisco firepower threat defense 6.4.0.9

cisco firepower threat defense 6.4.0.10

cisco firepower threat defense 6.4.0.11

cisco firepower threat defense 6.4.0.12

cisco firepower threat defense 6.4.0.13

cisco firepower threat defense 6.4.0.14

cisco firepower threat defense 6.7.0.1

cisco firepower threat defense 6.7.0.2

cisco firepower threat defense 6.7.0.3

cisco firepower threat defense 6.6.7

cisco firepower threat defense 7.2.1

cisco firepower threat defense 7.2.2

cisco firepower threat defense 7.2.3

cisco firepower threat defense 7.3.1.1

cisco firepower threat defense 7.3.1

cisco firepower threat defense 7.3.0

cisco firepower threat defense 7.1.0.3

cisco firepower threat defense 7.0.5

cisco firepower threat defense 6.6.7.1

cisco firepower threat defense 6.4.0.16

cisco firepower threat defense 6.4.0.15

Vendor Advisories

Cisco: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software AnyConnect Access Control List Bypass Vulnerabilities
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device These vulnerabili ...

References

NVD-CWE-noinfohttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ac-acl-bypass-bwd7q6Gbhttps://nvd.nist.govhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ac-acl-bypass-bwd7q6Gb
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook