UpHeron
All vulnerabilities

Servers and applications

CVE-2023-20245

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. These vulnerabilities are due to a logic error that could occur…

Severity
Medium 5.8
Published
1 Nov 2023
Last changed
11 Aug 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • Version 9.19.1.9
  • Version 9.19.1.5
  • Version 9.19.1
  • Version 9.18.3
All 142 release lines
  • Version 9.8.3.14
  • Version 9.8.3.16
  • Version 9.8.3.18
  • Version 9.8.3.21
  • Version 9.8.3.26
  • Version 9.8.3.29
  • Version 9.8.4
  • Version 9.8.4.3
  • Version 9.8.4.7
  • Version 9.8.4.8
  • Version 9.8.4.10
  • Version 9.8.4.12
  • Version 9.8.4.15
  • Version 9.8.4.17
  • Version 9.8.4.20
  • Version 9.8.4.22
  • Version 9.8.4.25
  • Version 9.8.4.26
  • Version 9.8.4.29
  • Version 9.8.4.32
  • Version 9.8.4.33
  • Version 9.8.4.34
  • Version 9.8.4.35
  • Version 9.8.4.39
  • Version 9.8.4.40
  • Version 9.8.4.41
  • Version 9.8.4.43
  • Version 9.8.4.44
  • Version 9.8.4.45
  • Version 9.8.4.46
  • Version 9.8.4.48
  • Version 9.12.1
  • Version 9.12.1.2
  • Version 9.12.1.3
  • Version 9.12.2
  • Version 9.12.2.1
  • Version 9.12.2.4
  • Version 9.12.2.5
  • Version 9.12.2.9
  • Version 9.12.3
  • Version 9.12.3.2
  • Version 9.12.3.7
  • Version 9.12.3.9
  • Version 9.12.3.12
  • Version 9.12.4
  • Version 9.12.4.2
  • Version 9.12.4.4
  • Version 9.12.4.7
  • Version 9.12.4.8
  • Version 9.12.4.10
  • Version 9.12.4.13
  • Version 9.12.4.18
  • Version 9.12.4.24
  • Version 9.12.4.26
  • Version 9.12.4.29
  • Version 9.12.4.30
  • Version 9.12.4.35
  • Version 9.12.4.37
  • Version 9.12.4.38
  • Version 9.12.4.39
  • Version 9.12.4.40
  • Version 9.12.4.41
  • Version 9.12.4.47
  • Version 9.12.4.48
  • Version 9.12.4.50
  • Version 9.12.4.52
  • Version 9.12.4.54
  • Version 9.12.4.55
  • Version 9.12.4.56
  • Version 9.14.1
  • Version 9.14.1.6
  • Version 9.14.1.10
  • Version 9.14.1.15
  • Version 9.14.1.19
  • Version 9.14.1.30
  • Version 9.14.2
  • Version 9.14.2.4
  • Version 9.14.2.8
  • Version 9.14.2.13
  • Version 9.14.2.15
  • Version 9.14.3
  • Version 9.14.3.1
  • Version 9.14.3.9
  • Version 9.14.3.11
  • Version 9.14.3.13
  • Version 9.14.3.15
  • Version 9.14.3.18
  • Version 9.14.4
  • Version 9.14.4.6
  • Version 9.14.4.7
  • Version 9.14.4.12
  • Version 9.14.4.13
  • Version 9.14.4.14
  • Version 9.14.4.15
  • Version 9.14.4.17
  • Version 9.14.4.22
  • Version 9.14.4.23
  • Version 9.15.1
  • Version 9.15.1.1
  • Version 9.15.1.7
  • Version 9.15.1.10
  • Version 9.15.1.15
  • Version 9.15.1.16
  • Version 9.15.1.17
  • Version 9.15.1.21
  • Version 9.16.1
  • Version 9.16.1.28
  • Version 9.16.2
  • Version 9.16.2.3
  • Version 9.16.2.7
  • Version 9.16.2.11
  • Version 9.16.2.13
  • Version 9.16.2.14
  • Version 9.16.3
  • Version 9.16.3.3
  • Version 9.16.3.14
  • Version 9.16.3.15
  • Version 9.16.3.19
  • Version 9.16.3.23
  • Version 9.16.4
  • Version 9.16.4.9
  • Version 9.16.4.14
  • Version 9.16.4.18
  • Version 9.17.1
  • Version 9.17.1.7
  • Version 9.17.1.9
  • Version 9.17.1.10
  • Version 9.17.1.11
  • Version 9.17.1.13
  • Version 9.17.1.15
  • Version 9.17.1.20
  • Version 9.17.1.30
  • Version 9.18.1
  • Version 9.18.1.3
  • Version 9.18.2
  • Version 9.18.2.5
  • Version 9.18.2.7
  • Version 9.18.2.8
  • Version 9.18.3
  • Version 9.19.1
  • Version 9.19.1.5
  • Version 9.19.1.9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-20245
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-20245