UpHeron
All vulnerabilities

Servers and applications

CVE-2024-20299

A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have been denied to flow through an affected device. This vulnerability is due to a logic error in populating group ACLs when…

Severity
Medium 5.8
Published
23 Oct 2024
Last changed
11 Aug 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • Version 9.19.1
  • Version 9.18.2.8
  • Version 9.18.2.7
  • Version 9.18.2.5
All 152 release lines
  • Version 9.8.1
  • Version 9.8.1.5
  • Version 9.8.1.7
  • Version 9.8.2
  • Version 9.8.2.8
  • Version 9.8.2.14
  • Version 9.8.2.15
  • Version 9.8.2.17
  • Version 9.8.2.20
  • Version 9.8.2.24
  • Version 9.8.2.26
  • Version 9.8.2.28
  • Version 9.8.2.33
  • Version 9.8.2.35
  • Version 9.8.2.38
  • Version 9.8.2.45
  • Version 9.8.3
  • Version 9.8.3.8
  • Version 9.8.3.11
  • Version 9.8.3.14
  • Version 9.8.3.16
  • Version 9.8.3.18
  • Version 9.8.3.21
  • Version 9.8.3.26
  • Version 9.8.3.29
  • Version 9.8.4
  • Version 9.8.4.3
  • Version 9.8.4.7
  • Version 9.8.4.8
  • Version 9.8.4.10
  • Version 9.8.4.12
  • Version 9.8.4.15
  • Version 9.8.4.17
  • Version 9.8.4.20
  • Version 9.8.4.22
  • Version 9.8.4.25
  • Version 9.8.4.26
  • Version 9.8.4.29
  • Version 9.8.4.32
  • Version 9.8.4.33
  • Version 9.8.4.34
  • Version 9.8.4.35
  • Version 9.8.4.39
  • Version 9.8.4.40
  • Version 9.8.4.41
  • Version 9.8.4.43
  • Version 9.8.4.44
  • Version 9.8.4.45
  • Version 9.8.4.46
  • Version 9.8.4.48
  • Version 9.12.1
  • Version 9.12.1.2
  • Version 9.12.1.3
  • Version 9.12.2
  • Version 9.12.2.1
  • Version 9.12.2.4
  • Version 9.12.2.5
  • Version 9.12.2.9
  • Version 9.12.3
  • Version 9.12.3.2
  • Version 9.12.3.7
  • Version 9.12.3.9
  • Version 9.12.3.12
  • Version 9.12.4
  • Version 9.12.4.2
  • Version 9.12.4.4
  • Version 9.12.4.7
  • Version 9.12.4.8
  • Version 9.12.4.10
  • Version 9.12.4.13
  • Version 9.12.4.18
  • Version 9.12.4.24
  • Version 9.12.4.26
  • Version 9.12.4.29
  • Version 9.12.4.30
  • Version 9.12.4.35
  • Version 9.12.4.37
  • Version 9.12.4.38
  • Version 9.12.4.39
  • Version 9.12.4.40
  • Version 9.12.4.41
  • Version 9.12.4.47
  • Version 9.12.4.48
  • Version 9.12.4.50
  • Version 9.12.4.52
  • Version 9.12.4.54
  • Version 9.12.4.55
  • Version 9.14.1
  • Version 9.14.1.6
  • Version 9.14.1.10
  • Version 9.14.1.15
  • Version 9.14.1.19
  • Version 9.14.1.30
  • Version 9.14.2
  • Version 9.14.2.4
  • Version 9.14.2.8
  • Version 9.14.2.13
  • Version 9.14.2.15
  • Version 9.14.3
  • Version 9.14.3.1
  • Version 9.14.3.9
  • Version 9.14.3.11
  • Version 9.14.3.13
  • Version 9.14.3.15
  • Version 9.14.3.18
  • Version 9.14.4
  • Version 9.14.4.6
  • Version 9.14.4.7
  • Version 9.14.4.12
  • Version 9.14.4.13
  • Version 9.14.4.14
  • Version 9.14.4.15
  • Version 9.14.4.17
  • Version 9.15.1
  • Version 9.15.1.1
  • Version 9.15.1.7
  • Version 9.15.1.10
  • Version 9.15.1.15
  • Version 9.15.1.16
  • Version 9.15.1.17
  • Version 9.15.1.21
  • Version 9.16.1
  • Version 9.16.1.28
  • Version 9.16.2
  • Version 9.16.2.3
  • Version 9.16.2.7
  • Version 9.16.2.11
  • Version 9.16.2.13
  • Version 9.16.2.14
  • Version 9.16.3
  • Version 9.16.3.3
  • Version 9.16.3.14
  • Version 9.16.3.15
  • Version 9.16.3.19
  • Version 9.16.3.23
  • Version 9.16.4
  • Version 9.16.4.9
  • Version 9.17.1
  • Version 9.17.1.7
  • Version 9.17.1.9
  • Version 9.17.1.10
  • Version 9.17.1.11
  • Version 9.17.1.13
  • Version 9.17.1.15
  • Version 9.17.1.20
  • Version 9.18.1
  • Version 9.18.1.3
  • Version 9.18.2
  • Version 9.18.2.5
  • Version 9.18.2.7
  • Version 9.18.2.8
  • Version 9.19.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-20299
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-20299