Denial of Service Vulnerability in Cisco Adaptive Security Appliance and Firepower Threat Defense

CVE-2023-20095

What is CVE-2023-20095?

A vulnerability exists in the remote access VPN capabilities of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software. This flaw can be exploited by an unauthenticated remote attacker through the manipulation of HTTPS requests sent to the device. If successfully exploited, this vulnerability causes resource exhaustion, potentially resulting in a denial of service condition on the affected device, impacting its availability and functionality.

References