CVEvulnerability

CVE-2024-20384

5.8 MEDIUM Published 2024-10-23 Modified 2026-08-11 Official page ↗
Status
Analyzed
Published
2024-10-23
Last modified
2026-08-11
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Weaknesses
CWE-290

Description

A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules.

Affected configurations

• cisco adaptive security appliance software 9.16.1 • cisco adaptive security appliance software 9.16.1.28 • cisco adaptive security appliance software 9.16.2 • cisco adaptive security appliance software 9.16.2.3 • cisco adaptive security appliance software 9.16.2.7 • cisco adaptive security appliance software 9.16.2.11 • cisco adaptive security appliance software 9.16.2.13 • cisco adaptive security appliance software 9.16.2.14 • cisco adaptive security appliance software 9.16.3 • cisco adaptive security appliance software 9.16.3.3 • cisco adaptive security appliance software 9.16.3.14 • cisco adaptive security appliance software 9.16.3.15 • cisco adaptive security appliance software 9.16.3.19 • cisco adaptive security appliance software 9.16.3.23 • cisco adaptive security appliance software 9.16.4 • cisco adaptive security appliance software 9.16.4.9 • cisco adaptive security appliance software 9.16.4.14 • cisco adaptive security appliance software 9.16.4.18 • cisco adaptive security appliance software 9.16.4.19 • cisco adaptive security appliance software 9.16.4.27 • cisco adaptive security appliance software 9.16.4.38 • cisco adaptive security appliance software 9.16.4.39 • cisco adaptive security appliance software 9.16.4.42 • cisco adaptive security appliance software 9.16.4.48 • cisco adaptive security appliance software 9.16.4.55 • cisco adaptive security appliance software 9.16.4.57 • cisco adaptive security appliance software 9.16.4.61 • cisco adaptive security appliance software 9.17.1 • cisco adaptive security appliance software 9.17.1.7 • cisco adaptive security appliance software 9.17.1.9 • cisco adaptive security appliance software 9.17.1.10 • cisco adaptive security appliance software 9.17.1.11 • cisco adaptive security appliance software 9.17.1.13 • cisco adaptive security appliance software 9.17.1.15 • cisco adaptive security appliance software 9.17.1.20 • cisco adaptive security appliance software 9.17.1.30 • cisco adaptive security appliance software 9.17.1.33 • cisco adaptive security appliance software 9.17.1.39 • cisco adaptive security appliance software 9.18.1 • cisco adaptive security appliance software 9.18.1.3 • cisco adaptive security appliance software 9.18.2 • cisco adaptive security appliance software 9.18.2.5 • cisco adaptive security appliance software 9.18.2.7 • cisco adaptive security appliance software 9.18.2.8 • cisco adaptive security appliance software 9.18.3 • cisco adaptive security appliance software 9.18.3.39 • cisco adaptive security appliance software 9.18.3.46 • cisco adaptive security appliance software 9.18.3.53 • cisco adaptive security appliance software 9.18.3.55 • cisco adaptive security appliance software 9.18.3.56 • cisco adaptive security appliance software 9.18.4 • cisco adaptive security appliance software 9.18.4.5 • cisco adaptive security appliance software 9.18.4.8 • cisco adaptive security appliance software 9.18.4.22 • cisco adaptive security appliance software 9.18.4.24 • cisco adaptive security appliance software 9.18.4.29 • cisco adaptive security appliance software 9.19.1 • cisco adaptive security appliance software 9.19.1.5 • cisco adaptive security appliance software 9.19.1.9 • cisco adaptive security appliance software 9.19.1.12 … and 50 more

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References