CVE-2024-20299

Summary

A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have been denied to flow through an affected device. This vulnerability is due to a logic error in populating group ACLs when an AnyConnect client establishes a new session toward an affected device. An attacker could exploit this vulnerability by establishing an AnyConnect connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.45affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.26affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.24affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.35affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.20affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.17affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.28affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.33affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.2.38affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.25affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.18affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.1.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.29affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.22affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3.12affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.17affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.16affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.20affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.11affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.1.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.12affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.1.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.26affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.1.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.3.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.21affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.2.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.6affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.3.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.19affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.26affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.1.30affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.29affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.32affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.33affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.34affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.18affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.35affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.2.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.24affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.16affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.39affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.26affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.1.28affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.29affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.30affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.40affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.11affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.17affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.35affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.41affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.37affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.11affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.3.18affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.39affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.38affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.43affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.2.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.40affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.15.1.21affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4.6affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.41affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.44affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.47affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4.12affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.1.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.11affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.48affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.19affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.13affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.50affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4.14affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.45affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.52affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4.15affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.3.23affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.54affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.14.4.17affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.46affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.17.1.20affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.16.4.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.12.4.55affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.8.4.48affected
CiscoCisco Firepower Threat Defense Software6.2.3.14affected
CiscoCisco Firepower Threat Defense Software6.4.0.1affected
CiscoCisco Firepower Threat Defense Software6.2.3.7affected
CiscoCisco Firepower Threat Defense Software6.2.3affected
CiscoCisco Firepower Threat Defense Software6.4.0.2affected
CiscoCisco Firepower Threat Defense Software6.2.3.9affected
CiscoCisco Firepower Threat Defense Software6.2.3.1affected
CiscoCisco Firepower Threat Defense Software6.2.3.2affected
CiscoCisco Firepower Threat Defense Software6.4.0.5affected
CiscoCisco Firepower Threat Defense Software6.2.3.10affected
CiscoCisco Firepower Threat Defense Software6.4.0affected
CiscoCisco Firepower Threat Defense Software6.4.0.3affected
CiscoCisco Firepower Threat Defense Software6.2.3.6affected
CiscoCisco Firepower Threat Defense Software6.4.0.4affected
CiscoCisco Firepower Threat Defense Software6.2.3.15affected
CiscoCisco Firepower Threat Defense Software6.2.3.5affected
CiscoCisco Firepower Threat Defense Software6.2.3.4affected
CiscoCisco Firepower Threat Defense Software6.2.3.3affected
CiscoCisco Firepower Threat Defense Software6.2.3.8affected
CiscoCisco Firepower Threat Defense Software6.4.0.6affected
CiscoCisco Firepower Threat Defense Software6.2.3.11affected
CiscoCisco Firepower Threat Defense Software6.2.3.12affected
CiscoCisco Firepower Threat Defense Software6.2.3.13affected
CiscoCisco Firepower Threat Defense Software6.4.0.7affected
CiscoCisco Firepower Threat Defense Software6.4.0.8affected
CiscoCisco Firepower Threat Defense Software6.6.0affected
CiscoCisco Firepower Threat Defense Software6.4.0.9affected
CiscoCisco Firepower Threat Defense Software6.2.3.16affected
CiscoCisco Firepower Threat Defense Software6.6.0.1affected
CiscoCisco Firepower Threat Defense Software6.6.1affected
CiscoCisco Firepower Threat Defense Software6.4.0.10affected
CiscoCisco Firepower Threat Defense Software6.7.0affected
CiscoCisco Firepower Threat Defense Software6.4.0.11affected
CiscoCisco Firepower Threat Defense Software6.6.3affected
CiscoCisco Firepower Threat Defense Software6.7.0.1affected
CiscoCisco Firepower Threat Defense Software6.6.4affected
CiscoCisco Firepower Threat Defense Software6.4.0.12affected
CiscoCisco Firepower Threat Defense Software6.7.0.2affected
CiscoCisco Firepower Threat Defense Software7.0.0affected
CiscoCisco Firepower Threat Defense Software6.2.3.17affected
CiscoCisco Firepower Threat Defense Software7.0.0.1affected
CiscoCisco Firepower Threat Defense Software6.6.5affected
CiscoCisco Firepower Threat Defense Software7.0.1affected
CiscoCisco Firepower Threat Defense Software7.1.0affected
CiscoCisco Firepower Threat Defense Software6.4.0.13affected
CiscoCisco Firepower Threat Defense Software6.6.5.1affected
CiscoCisco Firepower Threat Defense Software6.2.3.18affected
CiscoCisco Firepower Threat Defense Software7.0.1.1affected
CiscoCisco Firepower Threat Defense Software6.7.0.3affected
CiscoCisco Firepower Threat Defense Software6.4.0.14affected
CiscoCisco Firepower Threat Defense Software7.1.0.1affected
CiscoCisco Firepower Threat Defense Software6.6.5.2affected
CiscoCisco Firepower Threat Defense Software7.0.2affected
CiscoCisco Firepower Threat Defense Software6.4.0.15affected
CiscoCisco Firepower Threat Defense Software7.2.0affected
CiscoCisco Firepower Threat Defense Software7.0.2.1affected
CiscoCisco Firepower Threat Defense Software7.0.3affected
CiscoCisco Firepower Threat Defense Software6.6.7affected
CiscoCisco Firepower Threat Defense Software7.1.0.2affected
CiscoCisco Firepower Threat Defense Software7.2.0.1affected
CiscoCisco Firepower Threat Defense Software7.0.4affected
CiscoCisco Firepower Threat Defense Software7.2.1affected
CiscoCisco Firepower Threat Defense Software7.0.5affected
CiscoCisco Firepower Threat Defense Software6.4.0.16affected
CiscoCisco Firepower Threat Defense Software7.3.0affected
CiscoCisco Firepower Threat Defense Software7.2.2affected
CiscoCisco Firepower Threat Defense Software7.2.3affected
CiscoCisco Firepower Threat Defense Software6.6.7.1affected
CiscoCisco Firepower Threat Defense Software7.3.1affected
CiscoCisco Firepower Threat Defense Software7.1.0.3affected
CiscoCisco Firepower Threat Defense Software7.3.1.1affected
CiscoCisco Firepower Threat Defense Software6.6.7.2affected
CiscoCisco Firepower Threat Defense Software7.3.1.2affected

Weaknesses

  • CWE-290: Authentication Bypass by Spoofing

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References