CVEvulnerability
CVE-2024-20384
5.8 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-10-23
- Last modified
- 2026-08-11
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- Weaknesses
- CWE-290
Description
A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device.
This vulnerability is due to a logic error that occurs when NSG ACLs are populated on an affected device. An attacker could exploit this vulnerability by establishing a connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules.
Affected configurations
• cisco adaptive security appliance software 9.16.1
• cisco adaptive security appliance software 9.16.1.28
• cisco adaptive security appliance software 9.16.2
• cisco adaptive security appliance software 9.16.2.3
• cisco adaptive security appliance software 9.16.2.7
• cisco adaptive security appliance software 9.16.2.11
• cisco adaptive security appliance software 9.16.2.13
• cisco adaptive security appliance software 9.16.2.14
• cisco adaptive security appliance software 9.16.3
• cisco adaptive security appliance software 9.16.3.3
• cisco adaptive security appliance software 9.16.3.14
• cisco adaptive security appliance software 9.16.3.15
• cisco adaptive security appliance software 9.16.3.19
• cisco adaptive security appliance software 9.16.3.23
• cisco adaptive security appliance software 9.16.4
• cisco adaptive security appliance software 9.16.4.9
• cisco adaptive security appliance software 9.16.4.14
• cisco adaptive security appliance software 9.16.4.18
• cisco adaptive security appliance software 9.16.4.19
• cisco adaptive security appliance software 9.16.4.27
• cisco adaptive security appliance software 9.16.4.38
• cisco adaptive security appliance software 9.16.4.39
• cisco adaptive security appliance software 9.16.4.42
• cisco adaptive security appliance software 9.16.4.48
• cisco adaptive security appliance software 9.16.4.55
• cisco adaptive security appliance software 9.16.4.57
• cisco adaptive security appliance software 9.16.4.61
• cisco adaptive security appliance software 9.17.1
• cisco adaptive security appliance software 9.17.1.7
• cisco adaptive security appliance software 9.17.1.9
• cisco adaptive security appliance software 9.17.1.10
• cisco adaptive security appliance software 9.17.1.11
• cisco adaptive security appliance software 9.17.1.13
• cisco adaptive security appliance software 9.17.1.15
• cisco adaptive security appliance software 9.17.1.20
• cisco adaptive security appliance software 9.17.1.30
• cisco adaptive security appliance software 9.17.1.33
• cisco adaptive security appliance software 9.17.1.39
• cisco adaptive security appliance software 9.18.1
• cisco adaptive security appliance software 9.18.1.3
• cisco adaptive security appliance software 9.18.2
• cisco adaptive security appliance software 9.18.2.5
• cisco adaptive security appliance software 9.18.2.7
• cisco adaptive security appliance software 9.18.2.8
• cisco adaptive security appliance software 9.18.3
• cisco adaptive security appliance software 9.18.3.39
• cisco adaptive security appliance software 9.18.3.46
• cisco adaptive security appliance software 9.18.3.53
• cisco adaptive security appliance software 9.18.3.55
• cisco adaptive security appliance software 9.18.3.56
• cisco adaptive security appliance software 9.18.4
• cisco adaptive security appliance software 9.18.4.5
• cisco adaptive security appliance software 9.18.4.8
• cisco adaptive security appliance software 9.18.4.22
• cisco adaptive security appliance software 9.18.4.24
• cisco adaptive security appliance software 9.18.4.29
• cisco adaptive security appliance software 9.19.1
• cisco adaptive security appliance software 9.19.1.5
• cisco adaptive security appliance software 9.19.1.9
• cisco adaptive security appliance software 9.19.1.12
… and 50 more
Related
Weakness · CWE (1)
- CWE-290 Authentication Bypass by Spoofing weakness