CVE-2023-20256Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…

Description

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. These vulnerabilities are due to a logic error that could occur when the affected software constructs and applies per-user-override rules. An attacker could exploit these vulnerabilities by connecting to a network through an affected device that has a vulnerable configuration. A successful exploit could allow the attacker to bypass the interface ACL and access resources that would should be protected.

Timeline

Scores

EPSS (exploitation in 30 days)

0.57% · top 52% of all CVEs (13 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.

Affected products

• Cisco · Cisco Adaptive Security Appliance (ASA) Software

  • affected 9.8.4.25
  • affected 9.8.4.22
  • affected 9.8.4.26
  • affected 9.8.4.29
  • affected 9.8.4.32
  • affected 9.8.4.33
  • affected 9.8.4.34
  • affected 9.8.4.35
  • affected 9.8.4.39
  • affected 9.8.4.40
  • affected 9.8.4.41
  • affected 9.8.4.43
  • affected 9.8.4.44
  • affected 9.8.4.45
  • affected 9.8.4.46
  • affected 9.8.4.48
  • affected 9.12.4.2
  • affected 9.12.4.4
  • affected 9.12.4.7
  • affected 9.12.4.10
  • affected 9.12.4.13
  • affected 9.12.4.8
  • affected 9.12.4.18
  • affected 9.12.4.24
  • affected 9.12.4.26
  • affected 9.12.4.29
  • affected 9.12.4.30
  • affected 9.12.4.35
  • affected 9.12.4.37
  • affected 9.12.4.38
  • affected 9.12.4.39
  • affected 9.12.4.40
  • affected 9.12.4.41
  • affected 9.12.4.47
  • affected 9.12.4.48
  • affected 9.12.4.50
  • affected 9.12.4.52
  • affected 9.12.4.54
  • affected 9.12.4.55
  • affected 9.12.4.56
  • and 69 more

• Cisco · Cisco Firepower Threat Defense Software

  • affected 6.2.3.16
  • affected 6.2.3.17
  • affected 6.2.3.18
  • affected 6.6.1
  • affected 6.6.3
  • affected 6.6.4
  • affected 6.6.5
  • affected 6.6.5.1
  • affected 6.6.5.2
  • affected 6.6.7
  • affected 6.6.7.1
  • affected 6.4.0.10
  • affected 6.4.0.11
  • affected 6.4.0.12
  • affected 6.4.0.13
  • affected 6.4.0.14
  • affected 6.4.0.15
  • affected 6.4.0.16
  • affected 6.7.0
  • affected 6.7.0.1
  • affected 6.7.0.2
  • affected 6.7.0.3
  • affected 7.0.0
  • affected 7.0.0.1
  • affected 7.0.1
  • affected 7.0.1.1
  • affected 7.0.2
  • affected 7.0.2.1
  • affected 7.0.3
  • affected 7.0.4
  • affected 7.0.5
  • affected 7.1.0
  • affected 7.1.0.1
  • affected 7.1.0.2
  • affected 7.1.0.3
  • affected 7.2.0
  • affected 7.2.0.1
  • affected 7.2.1
  • affected 7.2.2
  • affected 7.2.3
  • and 3 more

What to do

Exploitation: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2023-24435 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2023-20256](https://cveledger.app/badge/CVE-2023-20256.svg)](https://cveledger.app/cve/CVE-2023-20256)

Record last updated 21 Nov 2024, 21:44 UTC.