Vulnerability · Published Oct 23, 2024 · Assigned by cisco
CVE-2024-20384
Medium 5.8
In plain English
A medium-severity authentication bypass by spoofing in Cisco Adaptive Security Appliance (ASA) Software from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Official description
A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.16.19.16.1.289.16.29.16.2.39.16.2.79.16.2.119.16.2.139.16.2.14 |
| Cisco | Cisco Firepower Threat Defense Software | 7.0.07.0.0.17.0.17.0.1.17.0.27.0.2.17.0.37.0.4 |
Weakness: CWE-290 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N