5.8

CVE-2024-20297

A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have been denied to flow through an affected device. This vulnerability is due to a logic error in populating group ACLs when an AnyConnect client establishes a new session toward an affected device. An attacker could exploit this vulnerability by establishing an AnyConnect connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Firepower Threat Defense Version6.2.3
Cisco ≫ Firepower Threat Defense Version6.2.3.1
Cisco ≫ Firepower Threat Defense Version6.2.3.2
Cisco ≫ Firepower Threat Defense Version6.2.3.3
Cisco ≫ Firepower Threat Defense Version6.2.3.4
Cisco ≫ Firepower Threat Defense Version6.2.3.5
Cisco ≫ Firepower Threat Defense Version6.2.3.6
Cisco ≫ Firepower Threat Defense Version6.2.3.7
Cisco ≫ Firepower Threat Defense Version6.2.3.8
Cisco ≫ Firepower Threat Defense Version6.2.3.9
Cisco ≫ Firepower Threat Defense Version6.2.3.10
Cisco ≫ Firepower Threat Defense Version6.2.3.11
Cisco ≫ Firepower Threat Defense Version6.2.3.12
Cisco ≫ Firepower Threat Defense Version6.2.3.13
Cisco ≫ Firepower Threat Defense Version6.2.3.14
Cisco ≫ Firepower Threat Defense Version6.2.3.15
Cisco ≫ Firepower Threat Defense Version6.2.3.16
Cisco ≫ Firepower Threat Defense Version6.2.3.17
Cisco ≫ Firepower Threat Defense Version6.2.3.18
Cisco ≫ Firepower Threat Defense Version6.4.0
Cisco ≫ Firepower Threat Defense Version6.4.0.1
Cisco ≫ Firepower Threat Defense Version6.4.0.2
Cisco ≫ Firepower Threat Defense Version6.4.0.3
Cisco ≫ Firepower Threat Defense Version6.4.0.4
Cisco ≫ Firepower Threat Defense Version6.4.0.5
Cisco ≫ Firepower Threat Defense Version6.4.0.6
Cisco ≫ Firepower Threat Defense Version6.4.0.7
Cisco ≫ Firepower Threat Defense Version6.4.0.8
Cisco ≫ Firepower Threat Defense Version6.4.0.9
Cisco ≫ Firepower Threat Defense Version6.4.0.10
Cisco ≫ Firepower Threat Defense Version6.4.0.11
Cisco ≫ Firepower Threat Defense Version6.4.0.12
Cisco ≫ Firepower Threat Defense Version6.4.0.13
Cisco ≫ Firepower Threat Defense Version6.4.0.14
Cisco ≫ Firepower Threat Defense Version6.4.0.15
Cisco ≫ Firepower Threat Defense Version6.4.0.16
Cisco ≫ Firepower Threat Defense Version6.4.0.17
Cisco ≫ Firepower Threat Defense Version6.4.0.18
Cisco ≫ Firepower Threat Defense Version6.6.0
Cisco ≫ Firepower Threat Defense Version6.6.0.1
Cisco ≫ Firepower Threat Defense Version6.6.1
Cisco ≫ Firepower Threat Defense Version6.6.3
Cisco ≫ Firepower Threat Defense Version6.6.4
Cisco ≫ Firepower Threat Defense Version6.6.5
Cisco ≫ Firepower Threat Defense Version6.6.5.1
Cisco ≫ Firepower Threat Defense Version6.6.5.2
Cisco ≫ Firepower Threat Defense Version6.6.7
Cisco ≫ Firepower Threat Defense Version6.6.7.1
Cisco ≫ Firepower Threat Defense Version6.6.7.2
Cisco ≫ Firepower Threat Defense Version6.7.0
Cisco ≫ Firepower Threat Defense Version6.7.0.1
Cisco ≫ Firepower Threat Defense Version6.7.0.2
Cisco ≫ Firepower Threat Defense Version6.7.0.3
Cisco ≫ Firepower Threat Defense Version7.0.0
Cisco ≫ Firepower Threat Defense Version7.0.0.1
Cisco ≫ Firepower Threat Defense Version7.0.1
Cisco ≫ Firepower Threat Defense Version7.0.1.1
Cisco ≫ Firepower Threat Defense Version7.0.2
Cisco ≫ Firepower Threat Defense Version7.0.2.1
Cisco ≫ Firepower Threat Defense Version7.0.3
Cisco ≫ Firepower Threat Defense Version7.0.4
Cisco ≫ Firepower Threat Defense Version7.0.5
Cisco ≫ Firepower Threat Defense Version7.0.6
Cisco ≫ Firepower Threat Defense Version7.0.6.1
Cisco ≫ Firepower Threat Defense Version7.1.0
Cisco ≫ Firepower Threat Defense Version7.1.0.1
Cisco ≫ Firepower Threat Defense Version7.1.0.2
Cisco ≫ Firepower Threat Defense Version7.1.0.3
Cisco ≫ Firepower Threat Defense Version7.2.0
Cisco ≫ Firepower Threat Defense Version7.2.0.1
Cisco ≫ Firepower Threat Defense Version7.2.1
Cisco ≫ Firepower Threat Defense Version7.2.2
Cisco ≫ Firepower Threat Defense Version7.2.3
Cisco ≫ Firepower Threat Defense Version7.2.4
Cisco ≫ Firepower Threat Defense Version7.2.4.1
Cisco ≫ Firepower Threat Defense Version7.2.5
Cisco ≫ Firepower Threat Defense Version7.3.0
Cisco ≫ Firepower Threat Defense Version7.3.1
Cisco ≫ Firepower Threat Defense Version7.3.1.1
Cisco ≫ Firepower Threat Defense Version7.3.1.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.08% 0.24
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
psirt@cisco.com 5.8 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.