Cisco ASA Software Vulnerability Allows Brute Force Attacks and Unauthorized SSL VPN Sessions
CVE-2023-20269

9.1CRITICAL

Key Information:

Vendor
Cisco
Status
Cisco Adaptive Security Appliance (asa) Software
Cisco Firepower Threat Defense Software
Vendor
CVE Published:
6 September 2023

Badges

💰 Ransomware👾 Exploit Exists🦅 CISA Reported

Summary

A vulnerability in the remote access VPN feature of Cisco's Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software allows unauthenticated remote attackers to execute brute force attacks to identify valid username and password combinations. This issue arises from inadequate separation of authentication, authorization, and accounting (AAA) for the VPN feature compared to other functionalities such as HTTPS management and site-to-site VPN connections. Successful exploitation could lead to the identification of valid credentials or facilitate an unauthorized clientless SSL VPN session for specific software releases, highlighting the importance of strengthening security measures and updating software to mitigate the risks associated with this vulnerability. Cisco is expected to release software updates to address this issue, and workarounds are available for immediate protection.

CISA Reported

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed as being exploited and is known by the CISA as enabling ransomware campaigns.

The CISA's recommendation is: Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.

Affected Version(s)

Cisco Adaptive Security Appliance (ASA) Software 9.8.1

Cisco Adaptive Security Appliance (ASA) Software 9.8.1.5

Cisco Adaptive Security Appliance (ASA) Software 9.8.1.7

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 💰

    Used in Ransomware

  • 👾

    Exploit known to exist

  • 🦅

    CISA Reported

  • Vulnerability published

  • Vulnerability Reserved

.