CVE-2023-20095

Summary

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of HTTPS requests. An attacker could exploit this vulnerability by sending crafted HTTPS requests to an affected system. A successful exploit could allow the attacker to cause resource exhaustion, resulting in a DoS condition.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.1.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.1.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.17affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.20affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.24affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.26affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.28affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.33affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.35affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.38affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.11affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.16affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.18affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.21affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.26affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.29affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.12affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.17affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.25affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.20affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.22affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.26affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.29affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.32affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.33affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.34affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.35affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.39affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.40affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.41affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.43affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.44affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.45affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.1.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.1.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3.12affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.18affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.24affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.26affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.29affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.30affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.35affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.37affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.38affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.39affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.40affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.41affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.6affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.19affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.30affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.11affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.18affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4.6affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.16affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.17affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.21affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.1.28affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.11affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.1affected
CiscoCisco Firepower Threat Defense Software6.2.3affected
CiscoCisco Firepower Threat Defense Software6.2.3.1affected
CiscoCisco Firepower Threat Defense Software6.2.3.2affected
CiscoCisco Firepower Threat Defense Software6.2.3.3affected
CiscoCisco Firepower Threat Defense Software6.2.3.4affected
CiscoCisco Firepower Threat Defense Software6.2.3.5affected
CiscoCisco Firepower Threat Defense Software6.2.3.6affected
CiscoCisco Firepower Threat Defense Software6.2.3.7affected
CiscoCisco Firepower Threat Defense Software6.2.3.8affected
CiscoCisco Firepower Threat Defense Software6.2.3.10affected
CiscoCisco Firepower Threat Defense Software6.2.3.11affected
CiscoCisco Firepower Threat Defense Software6.2.3.9affected
CiscoCisco Firepower Threat Defense Software6.2.3.12affected
CiscoCisco Firepower Threat Defense Software6.2.3.13affected
CiscoCisco Firepower Threat Defense Software6.2.3.14affected
CiscoCisco Firepower Threat Defense Software6.2.3.15affected
CiscoCisco Firepower Threat Defense Software6.2.3.16affected
CiscoCisco Firepower Threat Defense Software6.2.3.17affected
CiscoCisco Firepower Threat Defense Software6.2.3.18affected
CiscoCisco Firepower Threat Defense Software6.6.0affected
CiscoCisco Firepower Threat Defense Software6.6.0.1affected
CiscoCisco Firepower Threat Defense Software6.6.1affected
CiscoCisco Firepower Threat Defense Software6.6.3affected
CiscoCisco Firepower Threat Defense Software6.6.4affected
CiscoCisco Firepower Threat Defense Software6.6.5affected
CiscoCisco Firepower Threat Defense Software6.6.5.1affected
CiscoCisco Firepower Threat Defense Software6.6.5.2affected
CiscoCisco Firepower Threat Defense Software6.4.0affected
CiscoCisco Firepower Threat Defense Software6.4.0.1affected
CiscoCisco Firepower Threat Defense Software6.4.0.3affected
CiscoCisco Firepower Threat Defense Software6.4.0.2affected
CiscoCisco Firepower Threat Defense Software6.4.0.4affected
CiscoCisco Firepower Threat Defense Software6.4.0.5affected
CiscoCisco Firepower Threat Defense Software6.4.0.6affected
CiscoCisco Firepower Threat Defense Software6.4.0.7affected
CiscoCisco Firepower Threat Defense Software6.4.0.8affected
CiscoCisco Firepower Threat Defense Software6.4.0.9affected
CiscoCisco Firepower Threat Defense Software6.4.0.10affected
CiscoCisco Firepower Threat Defense Software6.4.0.11affected
CiscoCisco Firepower Threat Defense Software6.4.0.12affected
CiscoCisco Firepower Threat Defense Software6.4.0.13affected
CiscoCisco Firepower Threat Defense Software6.4.0.14affected
CiscoCisco Firepower Threat Defense Software6.4.0.15affected
CiscoCisco Firepower Threat Defense Software6.7.0affected
CiscoCisco Firepower Threat Defense Software6.7.0.1affected
CiscoCisco Firepower Threat Defense Software6.7.0.2affected
CiscoCisco Firepower Threat Defense Software6.7.0.3affected
CiscoCisco Firepower Threat Defense Software7.0.0affected
CiscoCisco Firepower Threat Defense Software7.0.0.1affected
CiscoCisco Firepower Threat Defense Software7.0.1affected
CiscoCisco Firepower Threat Defense Software7.0.1.1affected
CiscoCisco Firepower Threat Defense Software7.0.2affected
CiscoCisco Firepower Threat Defense Software7.0.2.1affected
CiscoCisco Firepower Threat Defense Software7.0.3affected
CiscoCisco Firepower Threat Defense Software7.1.0affected
CiscoCisco Firepower Threat Defense Software7.1.0.1affected
CiscoCisco Firepower Threat Defense Software7.1.0.2affected
CiscoCisco Firepower Threat Defense Software7.2.0affected
CiscoCisco Firepower Threat Defense Software7.2.0.1affected

Weaknesses

  • CWE-772: Missing Release of Resource after Effective Lifetime

ADP Enrichment

CVE Program Container

Additional References

References