cisco-sa-asa-ssl-vpn-Y88QOm77: Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Packet Validation Vulnerability
First published: Tue Dec 05 2023(Updated: )
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address.This vulnerability is due to
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance Software | ||
| Cisco Firepower Threat Defense |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-asa-ssl-vpn-Y88QOm77?
The severity of cisco-sa-asa-ssl-vpn-Y88QOm77 is classified as high, due to the potential for remote exploitation by authenticated attackers.
How do I fix cisco-sa-asa-ssl-vpn-Y88QOm77?
To fix cisco-sa-asa-ssl-vpn-Y88QOm77, it is recommended to upgrade to the latest patched version of Cisco ASA or FTD software.
Who is affected by cisco-sa-asa-ssl-vpn-Y88QOm77?
Organizations using Cisco Adaptive Security Appliance Software or Cisco Firepower Threat Defense Software with the AnyConnect SSL VPN feature are affected by cisco-sa-asa-ssl-vpn-Y88QOm77.
What are the potential impacts of cisco-sa-asa-ssl-vpn-Y88QOm77?
The potential impacts of cisco-sa-asa-ssl-vpn-Y88QOm77 include unauthorized access to network resources and data by manipulating VPN user identity through source IP address spoofing.
Is there a workaround for cisco-sa-asa-ssl-vpn-Y88QOm77?
Currently, there are no officially recommended workarounds for cisco-sa-asa-ssl-vpn-Y88QOm77; patching is the advised solution.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-recent
- source/Cisco
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco adaptive security appliance software
- canonical/cisco firepower threat defense