Vulnerabilities fixed in Cisco Adaptive Security Appliance (ASA)

🗓️ 02 Nov 2023 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 3 Views

Cisco ASA vulnerabilities fixed; could trigger denial of service, security bypass, or credential theft without authentication.

Reporter	Title	Published	Views	Family All 79
BDU FSTEC	The vulnerability of the implementation of TLS and SSL VPN client software from Cisco AnyConnect, which operates within the framework of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD), allows a perpetrator to cause service interruptions.	27 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the implementation of the Security Assertion Markup Language (SAML) standard for single-sign-on (SSO) authentication mechanisms in microprogramming-based network interfaces of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD). This allows attackers to bypass the authentication process.	28 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco AnyConnect VPN client software, which is part of the Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) network devices, allows a attacker to cause a service outage.	30 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) microprogramming systems allows a perpetrator to bypass the configured access control list.	12 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) microprogramming systems allows a perpetrator to bypass the configured access control list.	12 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-20042	1 Nov 202321:22	–	circl
Circl	CVE-2023-20086	1 Nov 202319:22	–	circl
Circl	CVE-2023-20245	1 Nov 202319:22	–	circl
Circl	CVE-2023-20256	1 Nov 202319:21	–	circl
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software ICMPv6 Message Processing Denial of Service Vulnerability	1 Nov 202316:00	–	cisco

02 Nov 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 3.18.6

EPSS0.00675

SSVC

denial of service security bypass credential theft no authentication adaptive security appliance software updates