Attacker Value
Unknown
CVE-2023-20256
CVE-2023-20256
(Last updated November 15, 2023) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. These vulnerabilities are due to a logic error that could occur when the affected software constructs and applies per-user-override rules. An attacker could exploit these vulnerabilities by connecting to a network through an affected device that has a vulnerable configuration. A successful exploit could allow the attacker to bypass the interface ACL and access resources that would should be protected.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
5.8 Medium
Impact Score:
1.4
Exploitability Score:
3.9
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Changed
Confidentiality (C):
None
Integrity (I):
Low
Availability (A):
None
General Information
Vendors
- cisco
Products
- adaptive security appliance software 9.12.4.10,
- adaptive security appliance software 9.12.4.13,
- adaptive security appliance software 9.12.4.18,
- adaptive security appliance software 9.12.4.2,
- adaptive security appliance software 9.12.4.24,
- adaptive security appliance software 9.12.4.26,
- adaptive security appliance software 9.12.4.29,
- adaptive security appliance software 9.12.4.30,
- adaptive security appliance software 9.12.4.35,
- adaptive security appliance software 9.12.4.37,
- adaptive security appliance software 9.12.4.38,
- adaptive security appliance software 9.12.4.39,
- adaptive security appliance software 9.12.4.4,
- adaptive security appliance software 9.12.4.40,
- adaptive security appliance software 9.12.4.41,
- adaptive security appliance software 9.12.4.47,
- adaptive security appliance software 9.12.4.48,
- adaptive security appliance software 9.12.4.50,
- adaptive security appliance software 9.12.4.52,
- adaptive security appliance software 9.12.4.54,
- adaptive security appliance software 9.12.4.55,
- adaptive security appliance software 9.12.4.56,
- adaptive security appliance software 9.12.4.7,
- adaptive security appliance software 9.12.4.8,
- adaptive security appliance software 9.14.1.10,
- adaptive security appliance software 9.14.1.15,
- adaptive security appliance software 9.14.1.19,
- adaptive security appliance software 9.14.1.30,
- adaptive security appliance software 9.14.2,
- adaptive security appliance software 9.14.2.13,
- adaptive security appliance software 9.14.2.15,
- adaptive security appliance software 9.14.2.4,
- adaptive security appliance software 9.14.2.8,
- adaptive security appliance software 9.14.3,
- adaptive security appliance software 9.14.3.1,
- adaptive security appliance software 9.14.3.11,
- adaptive security appliance software 9.14.3.13,
- adaptive security appliance software 9.14.3.15,
- adaptive security appliance software 9.14.3.18,
- adaptive security appliance software 9.14.3.9,
- adaptive security appliance software 9.14.4,
- adaptive security appliance software 9.14.4.12,
- adaptive security appliance software 9.14.4.13,
- adaptive security appliance software 9.14.4.14,
- adaptive security appliance software 9.14.4.15,
- adaptive security appliance software 9.14.4.17,
- adaptive security appliance software 9.14.4.22,
- adaptive security appliance software 9.14.4.23,
- adaptive security appliance software 9.14.4.6,
- adaptive security appliance software 9.14.4.7,
- adaptive security appliance software 9.15.1,
- adaptive security appliance software 9.15.1.1,
- adaptive security appliance software 9.15.1.10,
- adaptive security appliance software 9.15.1.15,
- adaptive security appliance software 9.15.1.16,
- adaptive security appliance software 9.15.1.17,
- adaptive security appliance software 9.15.1.21,
- adaptive security appliance software 9.15.1.7,
- adaptive security appliance software 9.16.1,
- adaptive security appliance software 9.16.1.28,
- adaptive security appliance software 9.16.2,
- adaptive security appliance software 9.16.2.11,
- adaptive security appliance software 9.16.2.13,
- adaptive security appliance software 9.16.2.14,
- adaptive security appliance software 9.16.2.3,
- adaptive security appliance software 9.16.2.7,
- adaptive security appliance software 9.16.3,
- adaptive security appliance software 9.16.3.14,
- adaptive security appliance software 9.16.3.15,
- adaptive security appliance software 9.16.3.19,
- adaptive security appliance software 9.16.3.23,
- adaptive security appliance software 9.16.3.3,
- adaptive security appliance software 9.16.4,
- adaptive security appliance software 9.16.4.14,
- adaptive security appliance software 9.16.4.9,
- adaptive security appliance software 9.17.1,
- adaptive security appliance software 9.17.1.10,
- adaptive security appliance software 9.17.1.11,
- adaptive security appliance software 9.17.1.13,
- adaptive security appliance software 9.17.1.15,
- adaptive security appliance software 9.17.1.20,
- adaptive security appliance software 9.17.1.30,
- adaptive security appliance software 9.17.1.7,
- adaptive security appliance software 9.17.1.9,
- adaptive security appliance software 9.18.1,
- adaptive security appliance software 9.18.1.3,
- adaptive security appliance software 9.18.2,
- adaptive security appliance software 9.18.2.5,
- adaptive security appliance software 9.18.2.7,
- adaptive security appliance software 9.18.2.8,
- adaptive security appliance software 9.18.3,
- adaptive security appliance software 9.19.1,
- adaptive security appliance software 9.19.1.5,
- adaptive security appliance software 9.8.4.22,
- adaptive security appliance software 9.8.4.25,
- adaptive security appliance software 9.8.4.26,
- adaptive security appliance software 9.8.4.29,
- adaptive security appliance software 9.8.4.32,
- adaptive security appliance software 9.8.4.33,
- adaptive security appliance software 9.8.4.34,
- adaptive security appliance software 9.8.4.35,
- adaptive security appliance software 9.8.4.39,
- adaptive security appliance software 9.8.4.40,
- adaptive security appliance software 9.8.4.41,
- adaptive security appliance software 9.8.4.43,
- adaptive security appliance software 9.8.4.44,
- adaptive security appliance software 9.8.4.45,
- adaptive security appliance software 9.8.4.46,
- adaptive security appliance software 9.8.4.48,
- firepower threat defense 6.2.3.16,
- firepower threat defense 6.2.3.17,
- firepower threat defense 6.2.3.18,
- firepower threat defense 6.4.0.10,
- firepower threat defense 6.4.0.11,
- firepower threat defense 6.4.0.12,
- firepower threat defense 6.4.0.13,
- firepower threat defense 6.4.0.14,
- firepower threat defense 6.4.0.15,
- firepower threat defense 6.4.0.16,
- firepower threat defense 6.6.1,
- firepower threat defense 6.6.3,
- firepower threat defense 6.6.4,
- firepower threat defense 6.6.5,
- firepower threat defense 6.6.5.1,
- firepower threat defense 6.6.5.2,
- firepower threat defense 6.6.7,
- firepower threat defense 6.6.7.1,
- firepower threat defense 6.7.0,
- firepower threat defense 6.7.0.1,
- firepower threat defense 6.7.0.2,
- firepower threat defense 6.7.0.3,
- firepower threat defense 7.0.0,
- firepower threat defense 7.0.0.1,
- firepower threat defense 7.0.1,
- firepower threat defense 7.0.1.1,
- firepower threat defense 7.0.2,
- firepower threat defense 7.0.2.1,
- firepower threat defense 7.0.3,
- firepower threat defense 7.0.4,
- firepower threat defense 7.0.5,
- firepower threat defense 7.1.0,
- firepower threat defense 7.1.0.1,
- firepower threat defense 7.1.0.2,
- firepower threat defense 7.1.0.3,
- firepower threat defense 7.2.0,
- firepower threat defense 7.2.0.1,
- firepower threat defense 7.2.1,
- firepower threat defense 7.2.2,
- firepower threat defense 7.2.3,
- firepower threat defense 7.3.0,
- firepower threat defense 7.3.1,
- firepower threat defense 7.3.1.1
