cisco-sa-asaftd-acl-bypass-VvnLNKqf: Cisco Adaptive Security Appliance and Firepower Threat Defense Software AnyConnect Access Control List Bypass Vulnerabilities
First published: Wed Oct 23 2024(Updated: )
Multiple vulnerabilities in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should have been denied to flow through an affected device.These vulnerabilities are due to a logic error in populating group ACLs when an AnyConnect client establishes a new session toward an affected device. An attacker could exploit these vulnerabilities by establishing an AnyConnect connection to the affected device. A successful exploit could allow the attacker to bypass configured ACL rules.Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-acl-bypass-VvnLNKqfThis advisory is part of the October 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance Software | ||
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-asaftd-acl-bypass-VvnLNKqf?
The severity of cisco-sa-asaftd-acl-bypass-VvnLNKqf is rated as high due to the ability for unauthenticated attackers to bypass access controls.
How do I fix cisco-sa-asaftd-acl-bypass-VvnLNKqf?
To fix cisco-sa-asaftd-acl-bypass-VvnLNKqf, Cisco recommends applying the latest security patches and updates for your ASA and FTD software.
What systems are affected by cisco-sa-asaftd-acl-bypass-VvnLNKqf?
Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software are affected by cisco-sa-asaftd-acl-bypass-VvnLNKqf.
Can cisco-sa-asaftd-acl-bypass-VvnLNKqf be exploited remotely?
Yes, cisco-sa-asaftd-acl-bypass-VvnLNKqf can be exploited remotely by an unauthenticated attacker.
What type of attack does cisco-sa-asaftd-acl-bypass-VvnLNKqf enable?
cisco-sa-asaftd-acl-bypass-VvnLNKqf enables a bypass of configured access control lists (ACLs), allowing unauthorized traffic.
- agent/title
- agent/references
- agent/weakness
- agent/event
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-recent
- source/Cisco
- agent/severity
- agent/description
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco adaptive security appliance software
- canonical/cisco firepower management center (fmc) and firepower threat defense (ftd) software