BDU:2024-01177

Опубликовано: 06 сент. 2023

Источник: fstec

CVSS3: 9.1

CVSS2: 9.4

EPSS Низкий

Описание

Уязвимость функции VPN микропрограммного обеспечения межсетевых экранов Cisco Firepower Threat Defense, Cisco Adaptive Security Appliance связана с обходом процедуры аутентификации посредством использования альтернативного пути или канала. Эксплуатация уязвимости может позволить нарушителю , действующему удаленно, установить сеанс SSL VPN без клиента с неавторизованным пользователем

Вендор

Cisco Systems Inc.

Наименование ПО

Firepower Threat Defense

Adaptive Security Appliance

Версия ПО

6.2.3 (Firepower Threat Defense)

6.4.0 (Firepower Threat Defense)

6.2.3.16 (Firepower Threat Defense)

9.8.4.22 (Adaptive Security Appliance)

9.8.4.25 (Adaptive Security Appliance)

9.12.4.2 (Adaptive Security Appliance)

9.14.1.15 (Adaptive Security Appliance)

9.16.1 (Adaptive Security Appliance)

7.0.0 (Firepower Threat Defense)

7.2.0 (Firepower Threat Defense)

7.2.0.1 (Firepower Threat Defense)

9.14.1 (Adaptive Security Appliance)

9.14.1.10 (Adaptive Security Appliance)

9.14.1.19 (Adaptive Security Appliance)

9.14.1.30 (Adaptive Security Appliance)

9.14.2 (Adaptive Security Appliance)

9.14.2.4 (Adaptive Security Appliance)

9.14.2.8 (Adaptive Security Appliance)

9.14.2.13 (Adaptive Security Appliance)

9.14.2.15 (Adaptive Security Appliance)

9.14.3 (Adaptive Security Appliance)

9.14.3.1 (Adaptive Security Appliance)

9.14.3.9 (Adaptive Security Appliance)

9.14.3.13 (Adaptive Security Appliance)

9.14.3.15 (Adaptive Security Appliance)

9.14.3.18 (Adaptive Security Appliance)

9.15.1 (Adaptive Security Appliance)

9.15.1.1 (Adaptive Security Appliance)

9.15.1.7 (Adaptive Security Appliance)

9.15.1.10 (Adaptive Security Appliance)

9.15.1.21 (Adaptive Security Appliance)

6.6.0 (Adaptive Security Appliance)

6.6.0.1 (Adaptive Security Appliance)

6.6.1 (Adaptive Security Appliance)

6.6.3 (Adaptive Security Appliance)

6.6.4 (Adaptive Security Appliance)

6.6.5 (Adaptive Security Appliance)

6.6.5.1 (Adaptive Security Appliance)

6.6.5.2 (Adaptive Security Appliance)

9.15.1.21 (Firepower Threat Defense)

9.14.1 (Firepower Threat Defense)

9.14.1.10 (Firepower Threat Defense)

9.14.1.15 (Firepower Threat Defense)

9.14.1.19 (Firepower Threat Defense)

9.14.1.30 (Firepower Threat Defense)

9.14.2 (Firepower Threat Defense)

9.14.2.4 (Firepower Threat Defense)

9.14.2.8 (Firepower Threat Defense)

9.14.2.13 (Firepower Threat Defense)

9.14.2.15 (Firepower Threat Defense)

9.14.3 (Firepower Threat Defense)

9.14.3.1 (Firepower Threat Defense)

9.14.3.9 (Firepower Threat Defense)

9.14.3.13 (Firepower Threat Defense)

9.14.3.15 (Firepower Threat Defense)

9.14.3.18 (Firepower Threat Defense)

6.6.0 (Firepower Threat Defense)

6.6.0.1 (Firepower Threat Defense)

6.6.1 (Firepower Threat Defense)

6.6.3 (Firepower Threat Defense)

6.6.4 (Firepower Threat Defense)

6.6.5 (Firepower Threat Defense)

6.6.5.1 (Firepower Threat Defense)

6.6.5.2 (Firepower Threat Defense)

9.15.1 (Firepower Threat Defense)

9.15.1.1 (Firepower Threat Defense)

9.15.1.7 (Firepower Threat Defense)

9.15.1.10 (Firepower Threat Defense)

7.0.0.1 (Firepower Threat Defense)

7.0.1 (Firepower Threat Defense)

7.0.1.1 (Firepower Threat Defense)

7.0.2 (Firepower Threat Defense)

7.0.2.1 (Firepower Threat Defense)

7.0.3 (Firepower Threat Defense)

7.0.4 (Firepower Threat Defense)

7.1.0.1 (Firepower Threat Defense)

7.1.0.2 (Firepower Threat Defense)

9.8.1 (Adaptive Security Appliance)

9.8.1.5 (Adaptive Security Appliance)

9.8.1.7 (Adaptive Security Appliance)

9.8.2 (Adaptive Security Appliance)

9.8.2.8 (Adaptive Security Appliance)

9.8.2.14 (Adaptive Security Appliance)

9.8.2.15 (Adaptive Security Appliance)

9.8.2.17 (Adaptive Security Appliance)

9.8.2.20 (Adaptive Security Appliance)

9.8.2.24 (Adaptive Security Appliance)

9.8.2.26 (Adaptive Security Appliance)

9.8.2.28 (Adaptive Security Appliance)

9.8.2.33 (Adaptive Security Appliance)

9.8.2.35 (Adaptive Security Appliance)

9.8.2.38 (Adaptive Security Appliance)

9.8.3 (Adaptive Security Appliance)

9.8.3.8 (Adaptive Security Appliance)

9.8.3.11 (Adaptive Security Appliance)

9.8.3.14 (Adaptive Security Appliance)

9.8.3.16 (Adaptive Security Appliance)

9.8.3.18 (Adaptive Security Appliance)

9.8.3.21 (Adaptive Security Appliance)

9.8.3.26 (Adaptive Security Appliance)

9.8.3.29 (Adaptive Security Appliance)

9.8.4 (Adaptive Security Appliance)

9.8.4.3 (Adaptive Security Appliance)

9.8.4.7 (Adaptive Security Appliance)

9.8.4.8 (Adaptive Security Appliance)

9.8.4.10 (Adaptive Security Appliance)

9.8.4.12 (Adaptive Security Appliance)

9.8.4.15 (Adaptive Security Appliance)

9.8.4.17 (Adaptive Security Appliance)

9.14.3.11 (Adaptive Security Appliance)

9.14.4.6 (Adaptive Security Appliance)

9.14.4 (Adaptive Security Appliance)

9.14.4.7 (Adaptive Security Appliance)

9.14.4.12 (Adaptive Security Appliance)

9.15.1.15 (Adaptive Security Appliance)

9.15.1.16 (Adaptive Security Appliance)

9.15.1.17 (Adaptive Security Appliance)

9.16.3 (Adaptive Security Appliance)

9.16.3.3 (Adaptive Security Appliance)

9.16.3.14 (Adaptive Security Appliance)

9.17.1 (Adaptive Security Appliance)

9.17.1.7 (Adaptive Security Appliance)

9.17.1.9 (Adaptive Security Appliance)

9.17.1.10 (Adaptive Security Appliance)

9.17.1.11 (Adaptive Security Appliance)

9.17.1.13 (Adaptive Security Appliance)

9.17.1.15 (Adaptive Security Appliance)

9.18.1 (Adaptive Security Appliance)

6.6.7 (Firepower Threat Defense)

9.16.1.28 (Adaptive Security Appliance)

9.16.2 (Adaptive Security Appliance)

9.16.2.3 (Adaptive Security Appliance)

9.16.2.7 (Adaptive Security Appliance)

9.16.2.11 (Adaptive Security Appliance)

9.16.2.13 (Adaptive Security Appliance)

9.16.2.14 (Adaptive Security Appliance)

9.16.3.15 (Adaptive Security Appliance)

9.16.3.19 (Adaptive Security Appliance)

9.16.3.23 (Adaptive Security Appliance)

9.16.4 (Adaptive Security Appliance)

9.16.4.9 (Adaptive Security Appliance)

9.17.1.20 (Adaptive Security Appliance)

9.18.1.3 (Adaptive Security Appliance)

9.18.2 (Adaptive Security Appliance)

9.18.2.5 (Adaptive Security Appliance)

9.18.2.7 (Adaptive Security Appliance)

9.19.1 (Adaptive Security Appliance)

7.0.5 (Firepower Threat Defense)

7.1.0.3 (Firepower Threat Defense)

7.2.1 (Firepower Threat Defense)

7.2.2 (Firepower Threat Defense)

7.2.3 (Firepower Threat Defense)

7.3.0 (Firepower Threat Defense)

7.3.1 (Firepower Threat Defense)

7.3.1.1 (Firepower Threat Defense)

7.2.4 (Firepower Threat Defense)

9.8.4.20 (Adaptive Security Appliance)

9.8.4.26 (Adaptive Security Appliance)

9.8.4.29 (Adaptive Security Appliance)

9.12.1 (Adaptive Security Appliance)

9.12.1.2 (Adaptive Security Appliance)

9.12.1.3 (Adaptive Security Appliance)

9.12.2 (Adaptive Security Appliance)

9.12.2.1 (Adaptive Security Appliance)

9.12.2.4 (Adaptive Security Appliance)

9.12.2.5 (Adaptive Security Appliance)

9.12.2.9 (Adaptive Security Appliance)

9.12.3 (Adaptive Security Appliance)

9.12.3.2 (Adaptive Security Appliance)

9.12.3.7 (Adaptive Security Appliance)

9.12.3.9 (Adaptive Security Appliance)

9.12.4 (Adaptive Security Appliance)

9.12.4.4 (Adaptive Security Appliance)

9.12.4.7 (Adaptive Security Appliance)

9.12.4.8 (Adaptive Security Appliance)

9.12.4.10 (Adaptive Security Appliance)

9.12.4.13 (Adaptive Security Appliance)

9.12.4.18 (Adaptive Security Appliance)

9.12.4.24 (Adaptive Security Appliance)

9.12.4.26 (Adaptive Security Appliance)

9.12.4.29 (Adaptive Security Appliance)

9.12.4.30 (Adaptive Security Appliance)

9.12.4.35 (Adaptive Security Appliance)

9.14.1.6 (Adaptive Security Appliance)

9.8.4.32 (Adaptive Security Appliance)

9.8.4.33 (Adaptive Security Appliance)

9.8.4.34 (Adaptive Security Appliance)

9.8.4.35 (Adaptive Security Appliance)

9.8.4.39 (Adaptive Security Appliance)

9.8.4.40 (Adaptive Security Appliance)

9.8.4.41 (Adaptive Security Appliance)

9.8.4.43 (Adaptive Security Appliance)

9.8.4.44 (Adaptive Security Appliance)

9.8.4.45 (Adaptive Security Appliance)

9.8.4.46 (Adaptive Security Appliance)

9.8.4.48 (Adaptive Security Appliance)

9.12.3.12 (Adaptive Security Appliance)

9.12.4.37 (Adaptive Security Appliance)

9.12.4.38 (Adaptive Security Appliance)

9.12.4.39 (Adaptive Security Appliance)

9.12.4.40 (Adaptive Security Appliance)

9.12.4.41 (Adaptive Security Appliance)

9.12.4.47 (Adaptive Security Appliance)

9.12.4.48 (Adaptive Security Appliance)

9.12.4.50 (Adaptive Security Appliance)

9.12.4.52 (Adaptive Security Appliance)

9.12.4.54 (Adaptive Security Appliance)

9.12.4.55 (Adaptive Security Appliance)

9.12.4.56 (Adaptive Security Appliance)

9.14.4.13 (Adaptive Security Appliance)

9.14.4.14 (Adaptive Security Appliance)

9.14.4.15 (Adaptive Security Appliance)

9.14.4.17 (Adaptive Security Appliance)

9.14.4.22 (Adaptive Security Appliance)

9.14.4.23 (Adaptive Security Appliance)

9.16.4.14 (Adaptive Security Appliance)

9.16.4.18 (Adaptive Security Appliance)

9.17.1.30 (Adaptive Security Appliance)

9.18.2.8 (Adaptive Security Appliance)

9.18.3 (Adaptive Security Appliance)

9.19.1.5 (Adaptive Security Appliance)

9.19.1.9 (Adaptive Security Appliance)

6.2.3.3 (Firepower Threat Defense)

6.2.3.4 (Firepower Threat Defense)

6.2.3.5 (Firepower Threat Defense)

6.2.3.6 (Firepower Threat Defense)

6.2.3.7 (Firepower Threat Defense)

6.2.3.8 (Firepower Threat Defense)

6.2.3.9 (Firepower Threat Defense)

6.2.3.10 (Firepower Threat Defense)

6.2.3.11 (Firepower Threat Defense)

6.2.3.12 (Firepower Threat Defense)

6.2.3.13 (Firepower Threat Defense)

6.2.3.14 (Firepower Threat Defense)

6.2.3.15 (Firepower Threat Defense)

6.2.3.17 (Firepower Threat Defense)

6.2.3.18 (Firepower Threat Defense)

6.4.0.1 (Firepower Threat Defense)

6.4.0.2 (Firepower Threat Defense)

6.4.0.3 (Firepower Threat Defense)

6.4.0.4 (Firepower Threat Defense)

6.4.0.5 (Firepower Threat Defense)

6.4.0.6 (Firepower Threat Defense)

6.4.0.7 (Firepower Threat Defense)

6.4.0.8 (Firepower Threat Defense)

6.4.0.9 (Firepower Threat Defense)

6.4.0.10 (Firepower Threat Defense)

6.4.0.11 (Firepower Threat Defense)

6.4.0.12 (Firepower Threat Defense)

6.4.0.13 (Firepower Threat Defense)

6.4.0.14 (Firepower Threat Defense)

6.4.0.15 (Firepower Threat Defense)

6.4.0.16 (Firepower Threat Defense)

6.6.7.1 (Firepower Threat Defense)

6.7.0 (Firepower Threat Defense)

6.7.0.1 (Firepower Threat Defense)

6.7.0.2 (Firepower Threat Defense)

6.7.0.3 (Firepower Threat Defense)

7.1.0 (Firepower Threat Defense)

6.2.3.1 (Firepower Threat Defense)

6.2.3.2 (Firepower Threat Defense)

9.12.4.58 (Adaptive Security Appliance)

9.16.4.19 (Adaptive Security Appliance)

9.16.4.27 (Adaptive Security Appliance)

9.18.3.39 (Adaptive Security Appliance)

9.18.3.46 (Adaptive Security Appliance)

9.19.1.12 (Adaptive Security Appliance)

7.0.6 (Firepower Threat Defense)

6.2.3 (Adaptive Security Appliance)

6.2.3.1 (Adaptive Security Appliance)

6.2.3.2 (Adaptive Security Appliance)

6.2.3.3 (Adaptive Security Appliance)

6.2.3.4 (Adaptive Security Appliance)

6.2.3.5 (Adaptive Security Appliance)

6.2.3.6 (Adaptive Security Appliance)

6.2.3.7 (Adaptive Security Appliance)

6.2.3.8 (Adaptive Security Appliance)

6.2.3.9 (Adaptive Security Appliance)

6.2.3.10 (Adaptive Security Appliance)

6.2.3.11 (Adaptive Security Appliance)

6.2.3.12 (Adaptive Security Appliance)

6.2.3.13 (Adaptive Security Appliance)

6.2.3.14 (Adaptive Security Appliance)

6.2.3.15 (Adaptive Security Appliance)

6.2.3.16 (Adaptive Security Appliance)

6.2.3.17 (Adaptive Security Appliance)

6.2.3.18 (Adaptive Security Appliance)

6.4.0 (Adaptive Security Appliance)

6.4.0.1 (Adaptive Security Appliance)

6.4.0.2 (Adaptive Security Appliance)

6.4.0.3 (Adaptive Security Appliance)

6.4.0.4 (Adaptive Security Appliance)

6.4.0.5 (Adaptive Security Appliance)

6.4.0.6 (Adaptive Security Appliance)

6.4.0.7 (Adaptive Security Appliance)

6.4.0.8 (Adaptive Security Appliance)

6.4.0.9 (Adaptive Security Appliance)

6.4.0.10 (Adaptive Security Appliance)

6.4.0.11 (Adaptive Security Appliance)

6.4.0.12 (Adaptive Security Appliance)

6.4.0.13 (Adaptive Security Appliance)

6.4.0.14 (Adaptive Security Appliance)

6.4.0.15 (Adaptive Security Appliance)

6.4.0.16 (Adaptive Security Appliance)

6.6.7 (Adaptive Security Appliance)

6.6.7.1 (Adaptive Security Appliance)

6.7.0 (Adaptive Security Appliance)

6.7.0.1 (Adaptive Security Appliance)

6.7.0.2 (Adaptive Security Appliance)

6.7.0.3 (Adaptive Security Appliance)

7.0.0 (Adaptive Security Appliance)

7.0.0.1 (Adaptive Security Appliance)

7.0.1 (Adaptive Security Appliance)

7.0.1.1 (Adaptive Security Appliance)

7.0.2 (Adaptive Security Appliance)

7.0.2.1 (Adaptive Security Appliance)

7.0.3 (Adaptive Security Appliance)

7.0.4 (Adaptive Security Appliance)

7.0.5 (Adaptive Security Appliance)

7.0.6 (Adaptive Security Appliance)

7.1.0 (Adaptive Security Appliance)

7.1.0.1 (Adaptive Security Appliance)

7.1.0.2 (Adaptive Security Appliance)

7.1.0.3 (Adaptive Security Appliance)

7.2.0 (Adaptive Security Appliance)

7.2.0.1 (Adaptive Security Appliance)

7.2.1 (Adaptive Security Appliance)

7.2.2 (Adaptive Security Appliance)

7.2.3 (Adaptive Security Appliance)

7.2.4 (Adaptive Security Appliance)

7.2.4.1 (Adaptive Security Appliance)

7.2.5 (Adaptive Security Appliance)

7.3.0 (Adaptive Security Appliance)

7.3.1 (Adaptive Security Appliance)

7.3.1.1 (Adaptive Security Appliance)

9.16.4.38 (Adaptive Security Appliance)

9.18.3.53 (Adaptive Security Appliance)

9.18.3.55 (Adaptive Security Appliance)

9.19.1.18 (Adaptive Security Appliance)

7.2.4.1 (Firepower Threat Defense)

7.2.5 (Firepower Threat Defense)

9.8.1 (Firepower Threat Defense)

9.8.1.5 (Firepower Threat Defense)

9.8.1.7 (Firepower Threat Defense)

9.8.2 (Firepower Threat Defense)

9.8.2.8 (Firepower Threat Defense)

9.8.2.14 (Firepower Threat Defense)

9.8.2.15 (Firepower Threat Defense)

9.8.2.17 (Firepower Threat Defense)

9.8.2.20 (Firepower Threat Defense)

9.8.2.24 (Firepower Threat Defense)

9.8.2.26 (Firepower Threat Defense)

9.8.2.28 (Firepower Threat Defense)

9.8.2.33 (Firepower Threat Defense)

9.8.2.35 (Firepower Threat Defense)

9.8.2.38 (Firepower Threat Defense)

9.8.3 (Firepower Threat Defense)

9.8.3.8 (Firepower Threat Defense)

9.8.3.11 (Firepower Threat Defense)

9.8.3.14 (Firepower Threat Defense)

9.8.3.16 (Firepower Threat Defense)

9.8.3.18 (Firepower Threat Defense)

9.8.3.21 (Firepower Threat Defense)

9.8.3.26 (Firepower Threat Defense)

9.8.3.29 (Firepower Threat Defense)

9.8.4 (Firepower Threat Defense)

9.8.4.3 (Firepower Threat Defense)

9.8.4.7 (Firepower Threat Defense)

9.8.4.8 (Firepower Threat Defense)

9.8.4.10 (Firepower Threat Defense)

9.8.4.12 (Firepower Threat Defense)

9.8.4.15 (Firepower Threat Defense)

9.8.4.17 (Firepower Threat Defense)

9.8.4.20 (Firepower Threat Defense)

9.8.4.22 (Firepower Threat Defense)

9.8.4.25 (Firepower Threat Defense)

9.8.4.26 (Firepower Threat Defense)

9.8.4.29 (Firepower Threat Defense)

9.8.4.32 (Firepower Threat Defense)

9.8.4.33 (Firepower Threat Defense)

9.8.4.34 (Firepower Threat Defense)

9.8.4.35 (Firepower Threat Defense)

9.8.4.39 (Firepower Threat Defense)

9.8.4.40 (Firepower Threat Defense)

9.8.4.41 (Firepower Threat Defense)

9.8.4.43 (Firepower Threat Defense)

9.8.4.44 (Firepower Threat Defense)

9.8.4.45 (Firepower Threat Defense)

9.8.4.46 (Firepower Threat Defense)

9.8.4.48 (Firepower Threat Defense)

9.12.1 (Firepower Threat Defense)

9.12.1.2 (Firepower Threat Defense)

9.12.1.3 (Firepower Threat Defense)

9.12.2 (Firepower Threat Defense)

9.12.2.1 (Firepower Threat Defense)

9.12.2.4 (Firepower Threat Defense)

9.12.2.5 (Firepower Threat Defense)

9.12.2.9 (Firepower Threat Defense)

9.12.3 (Firepower Threat Defense)

9.12.3.2 (Firepower Threat Defense)

9.12.3.7 (Firepower Threat Defense)

9.12.3.9 (Firepower Threat Defense)

9.12.3.12 (Firepower Threat Defense)

9.12.4 (Firepower Threat Defense)

9.12.4.2 (Firepower Threat Defense)

9.12.4.4 (Firepower Threat Defense)

9.12.4.7 (Firepower Threat Defense)

9.12.4.8 (Firepower Threat Defense)

9.12.4.10 (Firepower Threat Defense)

9.12.4.13 (Firepower Threat Defense)

9.12.4.18 (Firepower Threat Defense)

9.12.4.24 (Firepower Threat Defense)

9.12.4.26 (Firepower Threat Defense)

9.12.4.29 (Firepower Threat Defense)

9.12.4.30 (Firepower Threat Defense)

9.12.4.35 (Firepower Threat Defense)

9.12.4.37 (Firepower Threat Defense)

9.12.4.38 (Firepower Threat Defense)

9.12.4.39 (Firepower Threat Defense)

9.12.4.40 (Firepower Threat Defense)

9.12.4.41 (Firepower Threat Defense)

9.12.4.47 (Firepower Threat Defense)

9.12.4.48 (Firepower Threat Defense)

9.12.4.50 (Firepower Threat Defense)

9.12.4.52 (Firepower Threat Defense)

9.12.4.54 (Firepower Threat Defense)

9.12.4.55 (Firepower Threat Defense)

9.12.4.56 (Firepower Threat Defense)

9.12.4.58 (Firepower Threat Defense)

9.14.1.6 (Firepower Threat Defense)

9.14.3.11 (Firepower Threat Defense)

9.14.4 (Firepower Threat Defense)

9.14.4.6 (Firepower Threat Defense)

9.14.4.7 (Firepower Threat Defense)

9.14.4.12 (Firepower Threat Defense)

9.14.4.13 (Firepower Threat Defense)

9.14.4.14 (Firepower Threat Defense)

9.14.4.15 (Firepower Threat Defense)

9.14.4.17 (Firepower Threat Defense)

9.14.4.22 (Firepower Threat Defense)

9.14.4.23 (Firepower Threat Defense)

9.15.1.15 (Firepower Threat Defense)

9.15.1.16 (Firepower Threat Defense)

9.15.1.17 (Firepower Threat Defense)

9.16.1 (Firepower Threat Defense)

9.16.1.28 (Firepower Threat Defense)

9.16.2 (Firepower Threat Defense)

9.16.2.3 (Firepower Threat Defense)

9.16.2.7 (Firepower Threat Defense)

9.16.2.11 (Firepower Threat Defense)

9.16.2.13 (Firepower Threat Defense)

9.16.2.14 (Firepower Threat Defense)

9.16.3 (Firepower Threat Defense)

9.16.3.3 (Firepower Threat Defense)

9.16.3.14 (Firepower Threat Defense)

9.16.3.15 (Firepower Threat Defense)

9.16.3.19 (Firepower Threat Defense)

9.16.3.23 (Firepower Threat Defense)

9.16.4 (Firepower Threat Defense)

9.16.4.9 (Firepower Threat Defense)

9.16.4.14 (Firepower Threat Defense)

9.16.4.18 (Firepower Threat Defense)

9.16.4.19 (Firepower Threat Defense)

9.16.4.27 (Firepower Threat Defense)

9.16.4.38 (Firepower Threat Defense)

9.17.1 (Firepower Threat Defense)

9.17.1.7 (Firepower Threat Defense)

9.17.1.9 (Firepower Threat Defense)

9.17.1.10 (Firepower Threat Defense)

9.17.1.11 (Firepower Threat Defense)

9.17.1.13 (Firepower Threat Defense)

9.17.1.15 (Firepower Threat Defense)

9.17.1.20 (Firepower Threat Defense)

9.17.1.30 (Firepower Threat Defense)

9.18.1 (Firepower Threat Defense)

9.18.1.3 (Firepower Threat Defense)

9.18.2 (Firepower Threat Defense)

9.18.2.5 (Firepower Threat Defense)

9.18.2.7 (Firepower Threat Defense)

9.18.2.8 (Firepower Threat Defense)

9.18.3 (Firepower Threat Defense)

9.18.3.39 (Firepower Threat Defense)

9.18.3.46 (Firepower Threat Defense)

9.18.3.53 (Firepower Threat Defense)

9.18.3.55 (Firepower Threat Defense)

9.19.1 (Firepower Threat Defense)

9.19.1.5 (Firepower Threat Defense)

9.19.1.9 (Firepower Threat Defense)

9.19.1.12 (Firepower Threat Defense)

9.19.1.18 (Firepower Threat Defense)

Тип ПО

ПО программно-аппаратного средства

ПО сетевого программно-аппаратного средства

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 9,4)

Критический уровень опасности (базовая оценка CVSS 3.0 составляет 9,1)

Возможные меры по устранению уязвимости

Использование рекомендаций:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Существует

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20269
CVE

EPSS

Процентиль: 75%

0.0088

Низкий

9.1 Critical

CVSS3

9.4 Critical

CVSS2

Связанные уязвимости

CVE-2023-20269

CVSS3: 5

nvd

больше 2 лет назад

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user. This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following: Identify valid credentials that could then be used to establish an unauthorized remote a

GHSA-v7pw-9cmm-88m6