Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2023-20245

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unaut

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. These vulnerabilities are due to a logic error that could occur when the affected software constructs and applies per-user-override rules. An attacker could exploit these vulnerabilities by connecting to a network through an affected device that has a vulnerable configuration. A successful exploit could allow the attacker to bypass the interface ACL and access resources that would should be protected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Adaptive Security Appliance (ASA) Software

  • 9.8.3.14affected
  • 9.8.3.16affected
  • 9.8.3.18affected
  • 9.8.3.21affected
  • 9.8.3.26affected
  • 9.8.3.29affected
  • 9.8.4affected
  • 9.8.4.3affected
  • 9.8.4.7affected
  • 9.8.4.8affected
  • 9.8.4.10affected
  • 9.8.4.12affected
  • 9.8.4.15affected
  • 9.8.4.17affected
  • 9.8.4.25affected
  • 9.8.4.20affected
  • 9.8.4.22affected
  • 9.8.4.26affected
  • 9.8.4.29affected
  • 9.8.4.32affected
  • 9.8.4.33affected
  • 9.8.4.34affected
  • 9.8.4.35affected
  • 9.8.4.39affected
  • 9.8.4.40affected
  • 9.8.4.41affected
  • 9.8.4.43affected
  • 9.8.4.44affected
  • 9.8.4.45affected
  • 9.8.4.46affected
  • 9.8.4.48affected
  • 9.12.1affected
  • 9.12.1.2affected
  • 9.12.1.3affected
  • 9.12.2affected
  • 9.12.2.4affected
  • 9.12.2.5affected
  • 9.12.2.9affected
  • 9.12.3affected
  • 9.12.3.2affected
  • 9.12.3.7affected
  • 9.12.4affected
  • 9.12.3.12affected
  • 9.12.3.9affected
  • 9.12.2.1affected
  • 9.12.4.2affected
  • 9.12.4.4affected
  • 9.12.4.7affected
  • 9.12.4.10affected
  • 9.12.4.13affected
  • 9.12.4.8affected
  • 9.12.4.18affected
  • 9.12.4.24affected
  • 9.12.4.26affected
  • 9.12.4.29affected
  • 9.12.4.30affected
  • 9.12.4.35affected
  • 9.12.4.37affected
  • 9.12.4.38affected
  • 9.12.4.39affected
  • 9.12.4.40affected
  • 9.12.4.41affected
  • 9.12.4.47affected
  • 9.12.4.48affected
  • 9.12.4.50affected
  • 9.12.4.52affected
  • 9.12.4.54affected
  • 9.12.4.55affected
  • 9.12.4.56affected
  • 9.14.1affected
  • 9.14.1.10affected
  • 9.14.1.6affected
  • 9.14.1.15affected
  • 9.14.1.19affected
  • 9.14.1.30affected
  • 9.14.2affected
  • 9.14.2.4affected
  • 9.14.2.8affected
  • 9.14.2.13affected
  • 9.14.2.15affected
  • 9.14.3affected
  • 9.14.3.1affected
  • 9.14.3.9affected
  • 9.14.3.11affected
  • 9.14.3.13affected
  • 9.14.3.18affected
  • 9.14.3.15affected
  • 9.14.4affected
  • 9.14.4.6affected
  • 9.14.4.7affected
  • 9.14.4.12affected
  • 9.14.4.13affected
  • 9.14.4.14affected
  • 9.14.4.15affected
  • 9.14.4.17affected
  • 9.14.4.22affected
  • 9.14.4.23affected
  • 9.15.1affected
  • 9.15.1.7affected
  • 9.15.1.10affected
  • 9.15.1.15affected
  • 9.15.1.16affected
  • 9.15.1.17affected
  • 9.15.1.1affected
  • 9.15.1.21affected
  • 9.16.1affected
  • 9.16.1.28affected
  • 9.16.2affected
  • 9.16.2.3affected
  • 9.16.2.7affected
  • 9.16.2.11affected
  • 9.16.2.13affected
  • 9.16.2.14affected
  • 9.16.3affected
  • 9.16.3.3affected
  • 9.16.3.14affected
  • 9.16.3.15affected
  • 9.16.3.19affected
  • 9.16.3.23affected
  • 9.16.4affected
  • 9.16.4.9affected
  • 9.16.4.14affected
  • 9.16.4.18affected
  • 9.17.1affected
  • 9.17.1.7affected
  • 9.17.1.9affected
  • 9.17.1.10affected
  • 9.17.1.11affected
  • 9.17.1.13affected
  • 9.17.1.15affected
  • 9.17.1.20affected
  • 9.17.1.30affected
  • 9.18.1affected
  • 9.18.1.3affected
  • 9.18.2affected
  • 9.18.2.5affected
  • 9.18.2.7affected
  • 9.18.2.8affected
  • 9.18.3affected
  • 9.19.1affected
  • 9.19.1.5affected
  • 9.19.1.9affected

Cisco Cisco Firepower Threat Defense Software

  • 6.2.3.3affected
  • 6.2.3.4affected
  • 6.2.3.5affected
  • 6.2.3.6affected
  • 6.2.3.7affected
  • 6.2.3.8affected
  • 6.2.3.10affected
  • 6.2.3.11affected
  • 6.2.3.9affected
  • 6.2.3.12affected
  • 6.2.3.13affected
  • 6.2.3.14affected
  • 6.2.3.15affected
  • 6.2.3.16affected
  • 6.2.3.17affected
  • 6.2.3.18affected
  • 6.6.0affected
  • 6.6.0.1affected
  • 6.6.1affected
  • 6.6.3affected
  • 6.6.4affected
  • 6.6.5affected
  • 6.6.5.1affected
  • 6.6.5.2affected
  • 6.6.7affected
  • 6.6.7.1affected
  • 6.4.0affected
  • 6.4.0.1affected
  • 6.4.0.3affected
  • 6.4.0.2affected
  • 6.4.0.4affected
  • 6.4.0.5affected
  • 6.4.0.6affected
  • 6.4.0.7affected
  • 6.4.0.8affected
  • 6.4.0.9affected
  • 6.4.0.10affected
  • 6.4.0.11affected
  • 6.4.0.12affected
  • 6.4.0.13affected
  • 6.4.0.14affected
  • 6.4.0.15affected
  • 6.4.0.16affected
  • 6.7.0affected
  • 6.7.0.1affected
  • 6.7.0.2affected
  • 6.7.0.3affected
  • 7.0.0affected
  • 7.0.0.1affected
  • 7.0.1affected
  • 7.0.1.1affected
  • 7.0.2affected
  • 7.0.2.1affected
  • 7.0.3affected
  • 7.0.4affected
  • 7.0.5affected
  • 7.1.0affected
  • 7.1.0.1affected
  • 7.1.0.2affected
  • 7.1.0.3affected
  • 7.2.0affected
  • 7.2.0.1affected
  • 7.2.1affected
  • 7.2.2affected
  • 7.2.3affected
  • 7.3.0affected
  • 7.3.1affected
  • 7.3.1.1affected

References